Hackford Service Providers and Subprocessors
Effective date: 23 June 2026
This list explains service providers used by Hackford Data Ltd ("Hackford") in connection with its services and business operations. Roles vary by service and activity: a provider may act as Hackford's processor, an independent controller, or another service provider depending on the context and the data involved.
This list is informational except where it is incorporated into a customer contract or data processing addendum ("DPA"). Where required under the DPA, Hackford will give at least 14 days' notice of material additions or replacements of subprocessors that process Customer Personal Data.
Privacy contact: dan.robinson@hackforddata.com
Official registers, regulators and public websites, including the FCA, SEC, Companies House, the Financial Ombudsman Service and public source websites, are data sources. They are not listed here as subprocessors.
Table A - Subprocessors of Customer Personal Data
| Provider | Purpose | Data involved | When it applies | Primary processing region where known | Support, transfers and provider subprocessors |
|---|---|---|---|---|---|
| Render | Platform and database hosting. | Customer Personal Data hosted in the Hackford platform or agreed customer workflows. | Applies where Hackford hosts or processes Customer Personal Data for the relevant service. | Frankfurt, Germany, where configured for the hosted platform and database. | Wider support access or provider subprocessors may operate in other locations under contractual transfer safeguards. |
| Mailgun / Sinch | Transactional service emails. | Email addresses, names, account or service identifiers, message content and delivery metadata needed to send service emails. | Applies where transactional service emails are sent for a customer-controlled account, workflow or service. | Region depends on the configured sending service and routing. | Wider support access or provider subprocessors may operate in other locations under contractual transfer safeguards. |
| Sentry | Error monitoring, where enabled. | Error logs, technical diagnostics, request metadata and limited user or account identifiers where included in an error event. | Applies only where Sentry is enabled for the relevant service or environment. | Region depends on the enabled Sentry configuration. | Wider support access or provider subprocessors may operate in other locations under contractual transfer safeguards. |
| Cloudflare R2 | File storage. | Customer files and related metadata. | Applies only where customer files are stored for an agreed CRM or file-processing workflow. | Region depends on the agreed storage configuration. | Wider support access or provider subprocessors may operate in other locations under contractual transfer safeguards. |
Table B - Other Material Service Providers
| Provider | Purpose | Data involved | Role and when it applies |
|---|---|---|---|
| PostHog | Account-linked platform analytics. | Account, user, product usage, event and technical analytics data. | Used for platform analytics; role depends on the service configuration and data involved. |
| Google Analytics | Consent-gated website analytics. | Cookie identifiers, device and browser data, page views and website interaction data. | Used only where website analytics consent is given. |
| Stripe | Billing and payment processing. | Billing contact details, payment status, invoice, subscription and payment-related records. | Used for billing and payments; Stripe may act as an independent controller for some regulated payment activities. |
| Netlify | Website hosting and form processing. | Website request data and form submissions. | Used for Hackford website hosting and website forms. |
| Google Workspace | Business email and document administration. | Business emails, calendar records, documents, files and administrative metadata. | Used for Hackford business administration and communications. |
| Twenty CRM | Hackford's own prospect and customer relationship management. | Prospect, customer, contact, account, opportunity, task and note records. | Used for Hackford's own CRM and relationship management. |
| OpenAI | AI-assisted extraction, classification and analysis of official, public or otherwise authorised source material used in Hackford's internal data operations. Hackford does not currently provide a customer-facing AI agent or send customer prompts through the platform. | Official, public or otherwise authorised business source material used in Hackford's internal data operations. | Used for internal data operations only, not as a customer-data subprocessor for platform prompts. |
| OVHcloud | Hosting for self-hosted analytics or internal infrastructure where applicable. | Infrastructure logs, analytics data or internal operational data, depending on the deployment. | Used only where Hackford deploys relevant self-hosted analytics or internal infrastructure. |