Sub-processors

In plain English: These are the suppliers who may touch personal data while we run Tesylate for you — who they are, what they do, where they process, and the legal safeguard for anything leaving the UK. We tell you before this list changes (DPA, clause 5).

Suppliers processing customer platform data

Sub-processor	What it does	Processing location	Transfer safeguard
Microsoft (Azure, incl. Fabric/Power BI)	Hosting: data warehouses, application platform, reporting infrastructure	UK/EU regions	Not applicable (UK/EU processing)
Microsoft 365	Business email, including customer support correspondence	UK/EU	Not applicable (UK/EU processing)
Twilio SendGrid	Transactional email delivery (service and support-ticket notifications)	US	Twilio data protection addendum with UK Addendum / IDTA
Anthropic	AI assistant answers — only when you enable MCP/AI features; receives queries and relevant data to generate responses	US	Anthropic commercial DPA with a UK transfer mechanism

Suppliers processing customer account and billing data only

These handle your named contacts’ business details, not your synced platform data.

Supplier	What it does	Processing location	Transfer safeguard
Zoho (Zoho Books)	Invoicing and billing records	EU (Zoho EU data centre)	Not applicable (EU processing)
GoCardless	Direct Debit payment collection	UK	Not applicable — UK company
Calendly	Demo scheduling (pre-sales only, if you book a demo)	US	EU-US Data Privacy Framework, UK Extension

Changes to this list

We give customers at least 30 days’ notice before adding or replacing a sub-processor that touches platform data — see the Data Processing Addendum, clause 5.

Questions: support@tesylate.com. Tesylate Ltd, registered in England and Wales, company number 11281502, registered office 22 Apollo Way, Hemel Hempstead, England, HP2 5QG.