Sub-Processor Register
Third-party processors used by the HarkIQ platform
This register is maintained in accordance with UK GDPR Article 28 and lists all third-party sub-processors that HarkIQ engages to process personal data on behalf of our clients, together with the marketing and support tools that touch visitor data. The status column says what we rely on for each one today: either the provider’s published terms already incorporate a data processing addendum, or our review of those terms is still open. None of these is a separately negotiated agreement.
| Sub-Processor | Purpose | Data Processed | Location | Status |
|---|---|---|---|---|
| Claude accessed through Amazon Bedrock in AWS’s London region | AI analysis of call transcripts | Transcript text (PII-redacted by default; names retained), analysis prompts | United Kingdom (AWS London region) | Standard terms incorporatedChecked 26 August 2026 |
| Supabase | Database hosting and authentication | All application data | EU (London region) | Standard terms incorporatedChecked 26 August 2026 |
| Vercel | Application hosting and edge computing | Server-side request data | Global (edge) / United States (functions) | Standard terms incorporatedChecked 26 August 2026 |
| Sentry | Error monitoring and performance tracking | Error details, anonymised session data | United States | Under reviewChecked 26 August 2026 |
| SendGrid (Twilio) | Transactional email delivery, including crisis alerts | Admin email addresses; for crisis alerts, a call reference number and severity level only | United States | Standard terms incorporatedChecked 26 August 2026 |
| WhatConvertsOnly where a firm connects its own account | Inbound call-tracking source. Firms that use WhatConverts can have it send call transcripts to HarkIQ automatically. | Call transcripts and call metadata, supplied to HarkIQ from the firm's own WhatConverts account | United States | Under reviewChecked 26 August 2026 |
| HubSpot | CRM and customer management | Firm names, contact details, subscription data | United States | Standard terms incorporatedChecked 26 August 2026 |
| Stripe | Payment processing | Billing details, subscription management | United States | Standard terms incorporatedChecked 26 August 2026 |
| Crisp | Live chat on the website and in the app | Chat messages, name and email if given, browser metadata | Per Crisp's published terms | Under reviewChecked 26 August 2026 |
| LinkedIn Insight TagMarketing pages only; never in the app | Advertising measurement | Page views and browser metadata | United States | Under reviewChecked 26 August 2026 |
Statuses reflect each provider’s published terms as read on the date shown. Locations are as published by each provider. Register last updated 26 August 2026.
If you have questions about our sub-processors or data processing practices, please contact our DPO.