Clarium Limited uses the following third-party sub-processors to deliver its service. All sub-processors are bound by data processing agreements and process personal data only as directed by Clarium. All infrastructure sub-processors operate within the European Union.
We will notify account administrators of any material changes to this list at least 30 days before they take effect.
Infrastructure & Hosting
| Sub-processor | Purpose | Location | DPA |
|---|---|---|---|
| Microsoft Azure | Application hosting, database, file storage, authentication infrastructure | North Europe (Dublin) primary; West Europe (Amsterdam) DR | Microsoft DPA |
| Azure AI Services | AI extraction of GDPR data fields from customer-uploaded documents (transient processing only) | Sweden Central | Covered by Microsoft DPA |
| Cloudflare | CDN, DDoS mitigation, DNS — static marketing site assets only; no personal data persisted | Global CDN (static assets); EU for any personal data | Cloudflare DPA |
Payment Processing
| Sub-processor | Purpose | Location | DPA |
|---|---|---|---|
| SumUp | Payment card processing and billing management. Full card data held by SumUp only; Clarium stores last 4 digits. | London / Dublin (EU) | Available on request |
Consent & Analytics
| Sub-processor | Purpose | Location | DPA |
|---|---|---|---|
| CookieYes | Cookie consent management — records visitor consent preferences on the marketing site | EU | Available on request |
Change Notifications
If we add a new sub-processor or make a material change to an existing one, we will notify account administrators by email at least 30 days before the change takes effect. You may object to a new sub-processor by contacting [email protected] within 14 days of notification.