Sub-processor Register — SoftCare
Last updated: 20 August 2026
SoftCare (SoftCare Technologies Ltd) uses the third-party providers below to help deliver the service. Each is engaged under a written agreement that meets UK GDPR Article 28 requirements. This page is referenced by our Privacy Policy and Data Processing Agreement.
We give customers at least 30 days' notice before adding or replacing a sub-processor that processes personal data, so you can object on reasonable data-protection grounds. To be notified of changes, email [email protected].
| Sub-processor | Purpose | Location | Personal data |
| DigitalOcean | Application hosting and managed database (fully managed platform) | United Kingdom (London region) | All customer data |
| Cloudflare | DNS, network routing and static site hosting | Global (UK edge) | Network-level only |
| Stripe | Subscription billing and payment processing | UK / EU / US | Billing contact and payment details |
| Resend | Transactional email delivery | United States | Names, email addresses, notification content |
| Anthropic | AI assist features | United States | Only content submitted to AI features, under zero-data-retention API settings |
| Sentry | Application error reporting | European Union (Germany) | None intended — diagnostic traces only |
| PostHog | Product analytics | European Union (Frankfurt) | None — pseudonymous product events only, no resident data |
| Google Workspace | Business email and support correspondence | US / global | Contents of emails you send to us |
| GitHub | Source control and build infrastructure | United States | None by design |
Where a sub-processor is located outside the UK, transfers are made under an appropriate UK GDPR safeguard (UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses). Full transfer details are in Annex C of our Data Processing Agreement.
For questions about this register, contact [email protected].