Legal
Sub-processors
Last updated:
14th August 2026
14th August 2026
How to read this list
These providers help us deliver our services to you. Some providers are only used for certain features or configurations.
This list covers the business data you submit for scanning. The providers we use to run our own business, such as payments, support and accounting, are set out separately in our Third Party Provider List.
If you need the fuller description for each provider, covering what it is used for and the categories of personal data shared with it, that is set out in Annex I of our Data Processing Agreement.
| Provider | Location | Transfer safeguard |
|---|---|---|
| AWS EMEA SARL38 Avenue John F. Kennedy, L-1855 Luxembourg | Ireland | Not required for storage. Standard Contractual Clauses and UK Addendum cover any support access from outside the EEA |
| Amazon Web Services, Inc.410 Terry Avenue North, Seattle, WA 98109-5210, United States | Ireland, Germany, United States, Australia | Not applicable, no storage |
| SerpApi, LLC5540 N Lamar Blvd #12, Austin, TX 78751, United States | United States | Standard Contractual Clauses and UK Addendum |
| UAB Data troops (Decodo, formerly Smartproxy)Ε vitrigailos str. 34, Vilnius, Lithuania | Lithuania | Not required, within the EEA |
| Bright Data Ltd4 Hamahshev St., Netanya 4250714, Israel | Israel | UK adequacy regulations |
| Foursquare Labs, Inc.50 West 23rd Street, New York, NY 10010, United States | United States | Standard Contractual Clauses |
| HERE Global B.V.Kennedyplein 222-226, Eindhoven, Netherlands | Netherlands, United States | Not required for the processing that stays within the EEA. Standard Contractual Clauses cover the processing outside it |
| Google LLC (Gemini)1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | United States | EU-US Data Privacy Framework and UK Extension. Google's Cloud Data Processing Addendum also incorporates the Standard Contractual Clauses |
| Microsoft Corporation (Copilot)One Microsoft Way, Redmond, WA 98052, United States | United States | EU-US Data Privacy Framework, UK Extension and Swiss-US Data Privacy Framework. Microsoft's Products and Services Data Protection Addendum also incorporates the Standard Contractual Clauses |
| OpenAI OpCo, LLC1455 3rd Street, San Francisco, CA 94158, United States | United States | Standard Contractual Clauses and UK Addendum |
| Perplexity AI, Inc.115 Sansome Street, Suite 900, San Francisco, CA 94104, United States | United States | Standard Contractual Clauses |
| X.AI LLC (Grok)1450 Page Mill Road, Palo Alto, CA 94304, United States | United States | Standard Contractual Clauses and UK Addendum |
| Promotions and Development Group Corporation (Serpstat)1013 Centre Rd. Suite 403-A, Wilmington, DE 19805, United States | United States | Standard Contractual Clauses |
| Semrush Inc.800 Boylston Street, Suite 2475, Boston, MA 02199, United States | United States | Standard Contractual Clauses and UK International Data Transfer Agreement |
| Rollbar, Inc.548 Market St, Suite #60587, San Francisco, CA 94104-5401, United States | United States | EU-US Data Privacy Framework, UK Extension and Swiss-US Data Privacy Framework. Rollbar's own Data Processing Addendum also incorporates the Standard Contractual Clauses |
