Sub-processors
On this page
BrandedMark uses a small number of service providers ("sub-processors") to run the platform. This page lists every third party that may process personal data we handle for our customers, what it does for us and where.
This list forms Annex III of our Data Processing Agreement. We give 30 days' notice before adding a sub-processor or changing where one processes data: we email the account owner and notice contact of every customer, and record the change in the change log below.
Customer data is hosted in Microsoft Azure in the EU (the Netherlands, with a backup copy in Ireland).
1. Used for every customer
| Sub-processor | What it does | Where |
|---|---|---|
| Microsoft Ireland Operations Ltd (Microsoft Azure) | Hosting, storage and backup | EU (Netherlands, Ireland) |
| Cloudflare, Inc. | Network security and content delivery | Global network |
| Google LLC (Gemini API) | AI features, such as support chat, drafting and reading documents and images | Global: no committed processing location |
| Resend (Plus Five Five, Inc.) | Sending and receiving email | EU (Ireland) |
2. Used only with certain features
| Sub-processor | What it does | Where |
|---|---|---|
| Stripe Payments Europe, Ltd / Stripe, Inc. | Payments and payment fraud prevention. Its fraud-prevention script loads on brand portal pages | EU and US |
| Twilio Ireland Ltd | Sign-in codes by text message | EU (Ireland) |
International transfers. Where a sub-processor processes personal data outside the UK and EEA, the transfer is protected by the EU Standard Contractual Clauses and the UK Addendum, and by the EU-US Data Privacy Framework where the provider is certified. Each sub-processor is bound by written data protection terms appropriate to its role.
Google Maps Platform, which provides address lookup and maps, is used under Google's own terms as an independent controller, so it is not a sub-processor.
3. Services you connect are not sub-processors
Services you connect yourself act under your contract with them, not ours. That includes your ERP (for example Epicor Kinetic, IFS or SAP), your own messaging or shipping accounts, webhooks and API clients, and AI tools you add to your assistant.
4. Affiliates
None. Branded Mark Limited has no group companies that process customer data.
Change log
| Date | Change | Notice given |
|---|---|---|
| 20 October 2026 | First published list | n/a |
Version history
| Version | Date | Change |
|---|---|---|
| 1.0 | 20 October 2026 | First published version. |