Sub-processors
The third parties Voll Studios Ltd engages to process personal data on behalf of customers in delivering TPSClear, the UK TPS/CTPS screening service.
Last updated: August 2026.
Current sub-processors
The list below matches Annex 3 of the TPSClear Data Processing Agreement. Register screening is performed in the United Kingdom by our licensed data partners; the application database is hosted in the EU; hosting, DNS, payment, and email infrastructure providers are US-headquartered and process limited categories of data under the UK Addendum to the EU Standard Contractual Clauses.
| Sub-processor | Service | Location / region | Transfer mechanism |
|---|---|---|---|
| Vercel Inc. | Application hosting, serverless API execution, edge network, privacy-friendly web analytics | US company; UK and EU traffic served from EU edge and function regions | UK Addendum to the EU SCCs (Vercel DPA) |
| Supabase, Inc. | Managed Postgres database | US company; database hosted in an EU region | Data at rest in the EEA (covered by UK adequacy regulations); UK Addendum (Supabase DPA) for any access from outside the UK and EEA |
| Selectabase Ltd | Licensed TPS/CTPS screening provider (register lookups), engaged as a licensed data partner | United Kingdom | Not applicable (UK processing) |
| Data8 Ltd | Licensed data partner for TPS/CTPS register data | United Kingdom | Not applicable (UK processing) |
| Stripe, Inc. (and Stripe Payments Europe Ltd) | Payment processing and subscription billing (billing details only; no screening data) | US / Ireland | UK Addendum / SCCs (Stripe DPA) |
| Resend, Inc. | Transactional email for account and service notifications (no screening data) | United States | UK Addendum / SCCs (Resend DPA) |
| Cloudflare, Inc. | DNS and email routing for the tpsclear.co.uk domain | US company, global network | UK Addendum / SCCs (Cloudflare DPA) |
| Google (Google Ireland Ltd, Google Workspace) | Business email for support and privacy correspondence | Ireland / EU, with possible processing in the US | EEA processing covered by UK adequacy regulations; UK Addendum (Google DPA) for onward transfers |
HubSpot is not a sub-processor
For HubSpot-integration customers, the TPSClear app runs inside your own HubSpot portal. That portal is your own CRM environment, operated under your own agreement with HubSpot, so HubSpot is not a TPSClear sub-processor.
Changes to this list
We notify active customers in writing at least 30 days before adding or replacing a sub-processor, in line with our Data Processing Agreement. Customers may object on reasonable data protection grounds within that period. Questions about this list: email privacy@tpsclear.co.uk.