Legal

Sub-processors

Last updated:
12th August 2026

How to read this list

These providers help us deliver our services to you. Some providers are only used for certain features or configurations.

Provider	When it is engaged	What it is used for	Data shared	Location	Transfer safeguard
AWS EMEA SARL	All services	Hosting and storage of scan results and reports	All scan data and generated reports	Ireland	Not required for storage. Standard Contractual Clauses and UK Addendum cover any support access from outside the EEA
Amazon Web Services, Inc.	Website performance audits	Running website performance tests	The web address being tested. No data is retained in these regions	Ireland, Germany, United States, Australia	Not applicable, no storage
SerpApi, LLC	Search-based features across the platform	Search engine results data	Search terms - typically a business name, keyword, website address, or industry and location	United States	Standard Contractual Clauses and UK Addendum
UAB Data troops (Decodo, formerly Smartproxy)	All scans, and AI visibility audits	Data retrieval and regional routing services	The web address being retrieved and the page content returned	Lithuania	Not required, within the EEA
Bright Data Ltd	Website and listing scans	Data retrieval and regional routing services	The web address being retrieved and the page content returned	Israel	UK adequacy regulations
OpenAI OpCo, LLC	AI visibility audits, and AI features including the Paige assistant	AI summaries; AI assistant features	The business name and the city it operates in. No contact details	United States	Standard Contractual Clauses and UK Addendum
Netpeak Group Ltd (Serpstat)	Backlink analysis	Backlink and keyword data	The website address being analysed	United States, Ukraine	Standard Contractual Clauses
Rollbar, Inc.	All services	Application error reporting	Technical diagnostics. Scan data is not routinely included, but an error report may incidentally contain it	United States	EU-US Data Privacy Framework, UK Extension