At Safepoint, we work with select third-party service providers (“subprocessors”) to support the delivery of our platform and associated services. These subprocessors may process personal data on our behalf, solely for the purposes of providing their services to us, and always under strict contractual and security obligations.
We engage subprocessors only where necessary, and we ensure that each provider has appropriate technical and organisational measures in place to protect the data they process. Where required, we have entered into data processing agreements or other legally valid mechanisms to ensure compliance with applicable Data Protection Laws.
Below is a list of current subprocessors authorised by Safepoint:
| Subprocessor | Purpose |
|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, database hosting, and internal email services |
| MongoDB Atlas | Cloud-hosted database management |
| Twilio | SMS and phone call delivery |
| ClickSend | SMS and phone call delivery |
| Firebase / Google Cloud | Push notifications and limited in-app analytics |
| CSL | Multi-network SIM routing and data connectivity |
| Johnson Controls | 24/7 alarm receiving centre and emergency response |
| Stripe | Payment processing and billing contact data management |
| Mailchimp | Marketing and user onboarding email communications |
| Sentry | Application error and bug tracking (may include session metadata) |
| Grafana Cloud | Server log aggregation and performance monitoring |
| Intercom | End user and customer support communications platform |
We review and update our subprocessor relationships as our services evolve. This list may change from time to time to reflect new vendors or changes in how we deliver our services. Material changes will be communicated to affected customers in accordance with our contractual obligations.