Sub-processors
Version 1.0 · Effective 23 May 2026 · Last updated 23 May 2026
Harriet (JustParent Ltd, company number 14338607) uses the following sub-processors to provide the Harriet platform, website, and related services.
We give customers at least 30 days' notice before adding or replacing a sub-processor (see our DPA). To subscribe to change notifications, email legal@harriethq.com.
Related documents: DPA · Privacy policy · Terms of use
Platform and infrastructure
| Sub-processor | Function | Location | Transfer mechanism |
|---|---|---|---|
| Salesforce (Heroku) | Application hosting and infrastructure | United States / EU regions | UK IDTA / EU SCCs + UK Addendum |
| Amazon Web Services | Cloud storage (S3), email (SES), and related infrastructure (excluding AI inference; see AI and automation) | EU (Ireland) and other regions as configured | UK IDTA / EU SCCs + UK Addendum; adequacy where applicable |
AI and automation
| Sub-processor | Function | Location | Transfer mechanism |
|---|---|---|---|
| Amazon Web Services (Bedrock) | LLM API for chat and workflow features via AWS Bedrock, including EU-hosted Anthropic models where configured (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) | EU (Ireland) / United States | UK IDTA / EU SCCs + UK Addendum; adequacy where applicable |
| OpenAI | LLM API for chat and workflow features (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) | United States | UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| Anthropic | LLM API for chat and workflow features (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) | United States | UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| Google (Cloud / Gemini) | LLM API and related cloud services (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) | United States / EU | UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
Communications and support
| Sub-processor | Function | Location | Transfer mechanism |
|---|---|---|---|
| Mailgun (Sinch) | Transactional email delivery | EU | UK IDTA / EU SCCs + UK Addendum |
| Slack Technologies | Optional customer integration and notifications | United States | UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| Microsoft | Optional Teams integration, authentication, and mailbox features | United States / EU | UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| Optional Google Chat integration and notifications | United States / EU | UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
Payments and billing
| Sub-processor | Function | Location | Transfer mechanism |
|---|---|---|---|
| Stripe | Payment processing and billing | United States / EU | UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
Analytics, monitoring, and marketing
| Sub-processor | Function | Location | Transfer mechanism |
|---|---|---|---|
| PostHog | Product analytics (consent-gated on website) | EU / United States | UK IDTA / EU SCCs + UK Addendum |
| Google (Analytics / Tag Manager) | Website analytics and advertising tags | United States | UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| HubSpot | Meeting scheduling and CRM for sales enquiries | United States / EU | UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| Sentry | Error monitoring and application performance | United States / EU | UK IDTA / EU SCCs + UK Addendum |
Notes
- Customer-enabled integrations (for example Slack, Microsoft Teams, Google Chat, or a specific HRIS) process data only when Customer configures them.
- LLM providers are sub-processors: relevant Customer Data is shared with them to deliver AI features. They are contractually required not to use Customer Data for model training. Limited retention may apply for service delivery, abuse prevention, and compliance. See our Privacy policy and DPA.
- This list covers sub-processors used to deliver the Services and operate our website. It is updated when we add or replace providers.
Contact
Questions about sub-processors: legal@harriethq.com