Skip to main content

Sub-processors

Last updated: 22 October 2026

TradePilot is a trading name of TRADESMANEXPERT LTD (company number 16970808). These are the providers we use to run TradePilot. When a business uses TradePilot, we process its customers' data on its behalf, and these providers are our sub-processors. We add a provider to this page before it receives any personal data.

Providers we use

  • Hetzner Online GmbH

    What it does
    Hosting: servers, database, file storage and backups
    Personal data
    All account and business data
    Where
    Helsinki, Finland (EEA)
    Transfer safeguard
    UK adequacy regulations for the EEA

  • Cloudflare, Inc.

    What it does
    Domain name service, network security and cookieless website analytics
    Personal data
    IP addresses and request details, in transit
    Where
    Global network, including the United States
    Transfer safeguard
    UK Extension to the EU-US Data Privacy Framework (UK-US data bridge); if that lapses, the EU Standard Contractual Clauses with the UK Addendum

  • Sendinblue SAS (Brevo)

    What it does
    Sending email from the app
    Personal data
    Names, email addresses and message content
    Where
    France and Belgium (EU)
    Transfer safeguard
    UK adequacy regulations for the EEA; Brevo's own onward transfers use Standard Contractual Clauses

  • Stripe

    What it does
    Card payments and subscription billing
    Personal data
    Payer name, email, billing address and payment amounts (card details are handled by Stripe and never stored by us)
    Where
    United Kingdom and the United States
    Transfer safeguard
    UK Extension to the EU-US Data Privacy Framework; the UK Addendum in Stripe's Data Transfers Addendum

  • GoCardless Ltd

    What it does
    Direct Debit collection
    Personal data
    Payer name, email, bank account details, mandates and payments
    Where
    United Kingdom, with processing in the EEA
    Transfer safeguard
    UK company; the EEA is covered by UK adequacy regulations

  • Google LLC

    What it does
    Sign in with Google, and push notifications to Android phones (Firebase Cloud Messaging)
    Personal data
    Name, email address and Google account ID; device push tokens and notification content
    Where
    United States and other Google locations
    Transfer safeguard
    Standard Contractual Clauses approved for transfers from the UK, which Google's terms say it relies on where no adequacy decision applies

  • Apple

    What it does
    Sign in with Apple, and push notifications to iPhones
    Personal data
    Name, email address (which may be an Apple relay address) and Apple ID; device push tokens and notification content
    Where
    Ireland and the United States
    Transfer safeguard
    Standard Contractual Clauses, which Apple's privacy policy says govern its transfers of UK personal data

  • Functional Software, Inc. (Sentry)

    What it does
    Error monitoring for the app and our servers
    Personal data
    Technical error details, which can include personal data that appears in an error
    Where
    European Union (Frankfurt) and the United States
    Transfer safeguard
    UK Extension to the EU-US Data Privacy Framework (UK-US data bridge)

  • OpenAI OpCo, LLC

    What it does
    Voice-note transcription and AI features such as drafting messages, estimating jobs and suggesting schedules
    Personal data
    Voice recordings and transcripts, and the job and customer details in a request
    Where
    United States
    Transfer safeguard
    EU Standard Contractual Clauses with the UK Addendum (OpenAI's data processing addendum)

  • Meta Platforms

    What it does
    Importing lead-ad form submissions from a business's own Facebook or Instagram ads
    Personal data
    Lead name, email, phone number and form answers
    Where
    Ireland and the United States
    Transfer safeguard
    Meta's UK Data Transfer Addendum for data Meta processes on our behalf

Services a business connects itself

Xero and QuickBooks are accounting services a business chooses to connect. They act for that business under its own agreement with them, so they are not our sub-processors.

The video on our How it works page is a YouTube video. It loads only when you press play; our cookie policy explains what YouTube may then store.

Hosting and backups we run

Offline sync, route planning, file storage and monitoring run on our own servers at Hetzner, so no other company handles that data. Our backups are encrypted and kept on TradePilot's own equipment in the UK.

Questions

Our privacy policy explains how we use personal data and your rights. Email [email protected] with any questions.