Sub-processors
The providers that process data on our behalf, what each one does, where it operates and the safeguard we rely on when data leaves the UK or EEA.
About This List
ThriveFinity (OPC) Private Limited is the controller of the personal data described in our Privacy Policy. When we deliver a service to you as a business client, we use the providers below. Each is bound by its data processing terms with us.
Version 1 · 2 October 2026. We update this page before we add or replace a provider that processes client material. Active clients can ask to be told of changes by email: om@thrivefinity.uk.
Where a cell says “See provider” or “Being confirmed”
We only state a location or safeguard here once we have checked it against our agreement with that provider. Until then, the provider’s own data processing terms apply. Ask us for the current position at any time.
Hosting and Infrastructure
| Provider | What it does for us | Location | Transfer safeguard |
|---|---|---|---|
| Hetzner Online GmbH | Servers that run our API, workflows and database, plus tools we host ourselves: privacy-friendly analytics, error monitoring and AI-quality logging. | Germany (EEA) | No restricted transfer |
| Vercel, Inc. | Website hosting and delivery. | USA (EEA data residency selected) | SCCs + EU data residency |
| Cloudflare, Inc. | Network security, DNS, content delivery, the secure connection to our servers, encrypted backup storage and cookieless page statistics. | See provider | Being confirmed |
| Sanity AS | Content management for published pages and articles. No client material. | Norway (EEA) | EEA-resident |
Analytics, error monitoring and AI-quality logging run on our own servers at Hetzner, so that data does not go to a separate analytics or monitoring company.
Accounts and Payments
| Provider | What it does for us | Location | Transfer safeguard |
|---|---|---|---|
| Clerk, Inc. | Sign-in for client accounts. | See provider | Being confirmed |
| Razorpay Software Private Limited | Payment processing. We never see or store full card details. | India | Standard contractual terms |
Email, Forms and Records
| Provider | What it does for us | Location | Transfer safeguard |
|---|---|---|---|
| Resend, Inc. | Transactional email: confirmations and report delivery. | USA | SCCs |
| Google LLC (Google Workspace) | Our business email. | See provider | Being confirmed |
| Formspree, Inc. | Back-up form relay, used only if our own form systems are unreachable. | USA | SCCs |
| Notion Labs, Inc. | Internal record of enquiries and orders. | See provider | Being confirmed |
AI Model Providers
| Provider | What it does for us | Location | Transfer safeguard |
|---|---|---|---|
| OpenRouter, Inc. | Routes requests to the AI model providers below. | See provider | Being confirmed |
| Anthropic PBC | AI models for research and drafting; also checked in AI Visibility Signals. | See provider | Being confirmed |
| OpenAI, L.L.C. | AI models for research and drafting; also checked in AI Visibility Signals. | See provider | Being confirmed |
| Google LLC (Gemini) | AI models for research and drafting; also checked in AI Visibility Signals. | See provider | Being confirmed |
| Perplexity AI, Inc. | AI-assisted web research; also checked in AI Visibility Signals. | See provider | Being confirmed |
| DeepSeek | AI models for research and drafting. | See provider | Being confirmed |
We use these models to speed up research and drafting. A named person checks the evidence and signs every paid deliverable, and each deliverable names the models used. We do not use your material to train AI models. See AI Transparency.
Web Research Providers
| Provider | What it does for us | Location | Transfer safeguard |
|---|---|---|---|
| Serper | Web search results for research. | See provider | Being confirmed |
| DataForSEO | Search and keyword data for research. | See provider | Being confirmed |
| Brave Search | Web search results for research. | See provider | Being confirmed |
| Tavily | Web search results for research. | See provider | Being confirmed |
These services receive search queries built from your brief (for example, your market or competitors). We do not send them your contact details.
Transfer Safeguards
When personal data moves from the UK to a country without UK adequacy, we rely on the UK International Data Transfer Agreement (IDTA). For EEA data we rely on the EU Standard Contractual Clauses (SCCs). Our company is based in India; see International Transfers in our Privacy Policy and our company details.
Need a Data Processing Agreement?
Business clients can ask for our data processing terms and the current version of this list before ordering.