Sub-processors
The third parties Voll Studios Ltd engages to process personal data on behalf of customers in delivering the TPSClear screening service.
Last updated: 19 October 2026.
Current sub-processors
The list below matches Annex 3 of the TPSClear Data Processing Agreement. UK register screening is performed in the United Kingdom, by our own register service or by our licensed data partners, and Australian numbers are checked in Australia; the application database is hosted in the EU; hosting, DNS, payment, and email infrastructure providers are US-headquartered and process limited categories of data under the UK Addendum to the EU Standard Contractual Clauses.
| Sub-processor | Service | Location / region | Transfer mechanism |
|---|---|---|---|
| Vercel Inc. | Application hosting, serverless API execution, edge network, privacy-friendly web analytics | US company; functions run in London, and UK and EU traffic is served from the nearest edge region | UK Addendum to the EU SCCs (Vercel DPA) |
| Supabase, Inc. | Managed Postgres database | US company; database hosted in an EU region | Data at rest in the EEA (covered by UK adequacy regulations); UK Addendum (Supabase DPA) for any access from outside the UK and EEA |
| DigitalOcean, LLC | Hosting for our own TPS/CTPS register service, which checks numbers against the register files Voll Studios Ltd is licensed for | US company; service hosted in London, United Kingdom | UK Addendum / SCCs (DigitalOcean DPA) |
| Fly.io, Inc. | Standby hosting for our own TPS/CTPS register service, used only when the main host is unavailable. Numbers are checked in memory and not stored | US company; service hosted in London, United Kingdom | UK Extension to the EU-U.S. Data Privacy Framework (UK data bridge); Fly.io DPA |
| Selectabase Ltd | Licensed TPS/CTPS screening provider (register lookups) for customers not yet on our own register service, and the first fallback when it is unavailable | United Kingdom | Not applicable (UK processing) |
| Data8 Ltd | Licensed data partner for TPS/CTPS register data, held in reserve and not currently used for lookups | United Kingdom | Not applicable (UK processing) |
| Simunix Ltd (T2A) | Licensed data partner for TPS/CTPS register data, used as the second fallback when other lookups are unavailable | United Kingdom | Not applicable (UK processing) |
| 3G Telecommunications Ltd (hlrlookup.com) | Mobile network status lookups for dead number checks. Data: phone numbers. Results are retained by the provider for 30 days | Leeds, United Kingdom; hosted on AWS in Ireland | Data at rest in the EEA (covered by UK adequacy regulations) |
| TMT Analysis Ltd (TMT ID) | Second provider of mobile network status lookups for dead number checks, used when hlrlookup.com is unavailable, and quality comparison of results. Data: phone numbers | London, United Kingdom; hosted in Germany and Finland | Data at rest in the EEA (covered by UK adequacy regulations) |
| Stripe, Inc. (and Stripe Payments Europe Ltd) | Payment processing and subscription billing (billing details only; no screening data) | US / Ireland | UK Addendum / SCCs (Stripe DPA) |
| Resend, Inc. | Transactional email for account and service notifications (no screening data) | United States | UK Addendum / SCCs (Resend DPA) |
| Cloudflare, Inc. | DNS and email routing for the tpsclear.co.uk domain | US company, global network | UK Addendum / SCCs (Cloudflare DPA) |
| Google (Google Ireland Ltd, Google Workspace) | Business email for support and privacy correspondence | Ireland / EU, with possible processing in the US | EEA processing covered by UK adequacy regulations; UK Addendum (Google DPA) for onward transfers |
Your CRM is not a sub-processor
For CRM-integration customers, the TPSClear app connects to your own CRM account. That account is your own CRM environment, operated under your own agreement with the CRM provider, so the CRM provider is not a TPSClear sub-processor. This applies to:
- HubSpot: the TPSClear app runs inside your own HubSpot portal.
- Pipedrive (Pipedrive OÜ, Estonia): the TPSClear app connects to your own Pipedrive company account.
- Zoho CRM (Zoho Corporation): the TPSClear app connects to your own Zoho CRM organisation, in the Zoho data centre your account uses (for example EU, UK, US or Australia).
Changes to this list
We notify active customers in writing at least 30 days before adding or replacing a sub-processor, in line with our Data Processing Agreement. Customers may object on reasonable data protection grounds within that period. The two mobile network status providers are used only for customers who use dead number checks, who authorise them by starting to use that service. Questions about this list: email privacy@tpsclear.co.uk.