Pressifo (Data Professionals Ltd) uses the third parties below to deliver the service. All are bound by written data processing terms compliant with UK GDPR Art. 28, and international transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on UK adequacy regulations.
We will give customers at least 30 days' notice of any new or replacement sub-processor by email and by updating this page. Subscribe to updates by emailing privacy@pressifo.com.
Infrastructure
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, DDoS protection, edge compute | IP addresses, request metadata, cached assets | Global (UK/EU edge) |
| Supabase, Inc. | Primary database, authentication, storage | Account data, workspace content, journalist records | EU (Frankfurt) |
| Resend, Inc. | Transactional and outreach email delivery | Recipient email address, subject, body, delivery events | USA (SCCs + UK IDTA in place) |
| Stripe Payments Europe, Ltd. | Subscription billing and payment processing | Name, billing address, VAT number, card token | EU / UK |
AI and analytics
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| OpenAI Ireland Ltd. | LLM inference for story and pitch generation | Prompt content submitted by the customer | EU / USA (SCCs + UK IDTA) |
| Anthropic PBC | LLM inference for story and pitch generation | Prompt content submitted by the customer | USA (SCCs + UK IDTA) |
| Google Ireland Ltd. | News coverage tracking (Google News); Analytics (with consent) | Search queries; anonymised usage events | EU / USA (SCCs + UK IDTA) |
Contact
Questions or objections about a sub-processor: privacy@pressifo.com.