Subprocessors · updated 2026-09-04
Subprocessors
Two. There is no analytics vendor, no tracking, no AI provider and no third-party storage. We tell account owners 30 days before adding one, per the data processing terms.
| Provider | Purpose | Location | What it sees |
|---|---|---|---|
| Contabo GmbH | Hosting: the virtual server that runs the site, the calculation engine and the database | Portsmouth, United Kingdom | All service data at rest, on our own encrypted-in-transit stack; Contabo has no application-level access |
| Resend, Inc. | Transactional email: sign-in links, invitations, threshold alerts, monthly positions, supplier portal messages, rules updates | United States (standard contractual clauses) | Recipient email address and the message content |
Questions: hello@cbamreturn.co.uk.