The third parties we use to run SafeHanded. None of them holds a key that can decrypt a credential handed over through it.
| Provider | Purpose | Personal data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosting: servers, database, backups and storage for encrypted attachments and logos | All service data. Handover payloads are stored as ciphertext only | EU (Germany, Finland) |
| Stripe Payments UK Ltd | Subscription billing and payments | Organisation name, billing contact, email and address, tax ID, payment card details | UK, EU and US |
| Microsoft Ireland Operations Ltd (Exchange Online) | Sending SafeHanded's own email: sign-in links, invitations, request links, one-time codes and notifications, and delivering contact-form messages to us | Recipient name and email address, and the message, which may contain a link or a one-time code. For the contact form, what the sender typed into it | UK |
| Twilio Ireland Ltd | Sending SMS, only where an organisation uses SafeHanded's SMS service | Recipient phone number and the message, which contains a link or a one-time code | EU and US |
| Cloudflare, Inc. | Delivering the public website (safehanded.com) and passing contact-form messages on to our email. Anti-abuse checks (Turnstile) on the contact form, the link checker, and handover pages where an organisation enables them | Website visitors' IP address, requested page and browser signals, and contact-form messages in transit | Global |
Where a provider is outside the UK and EEA, transfers are protected as described in our Privacy Policy. A handed-over credential is encrypted in the sender's browser before it reaches us, and our tests fail the build if secret material could reach our servers or logs, so no provider receives one in readable form.
These act on your instructions when you switch them on. They are your providers, not our sub-processors:
We give at least 30 days' notice of a new or replacement sub-processor by updating this page and emailing each customer organisation's owners, as our Data Processing Agreement sets out.