Sub-processors

1.What a sub-processor is

A sub-processor is a provider that processes customer data on our behalf while we provide Signed to you. Customer data is the directory, signature and other data your organisation puts into Signed, as our data processing terms explain.

Each sub-processor below works under a written contract with data protection obligations equivalent to our data processing terms, and we stay responsible to you for their work.

2.Current sub-processors

Both process customer data in the UK, in the AWS London region, so no international transfer safeguard is needed.

3.Other providers we use

These providers don't receive customer data, so they aren't sub-processors. They're listed here so you can see every service involved.

• Stripe takes payments for Signed plans. It receives your billing contact, any billing address or VAT details you give and your card details, which go straight to Stripe. Stripe's handling of payment data is covered by its own privacy policy.
• Google Analytics, from Google Ireland Limited, runs on our marketing website only, and only if a visitor allows it. It never receives data from the portal, the Outlook add-in or the API. Our cookie policy explains how it works.

4.Services you connect

Microsoft 365. If you connect Microsoft 365, Signed reads your directory from Microsoft Entra ID through Microsoft Graph, and the add-in runs inside Outlook. Microsoft is your own supplier, under your agreement with Microsoft, rather than our sub-processor.

5.Changes and objections

Before we add or replace a sub-processor, we'll email your organisation's account owner at least 30 days in advance and update this page and its change log. The email says who the provider is, what it will do and where.

If you object on reasonable data protection grounds, tell us within that time at hello@usesigned.co.uk. We'll work with you to find a solution. If we can't, you can cancel before the change takes effect, without a cancellation fee.

6.Change log