Sub-processors & Data Residency
Version 1.0 · Effective date: 14 July 2026 · ProSurvey Apps Limited (company no. 17118570), registered in England and Wales.
See also: Data Processing Agreement · Privacy Policy · Trust & Security Handbook
This register lists the third parties who process data on our behalf, where that data is held, and — for anything that leaves the UK — the transfer safeguard relied on.
Data residency
All platform data (Firestore database, Cloud Storage, Cloud Functions, and authentication) is stored and processed in the Google Cloud London region (europe-west2), enforced in our codebase. Static assets (website, portal, app bundles) are code, not customer data, and are distributed via CDN.
Core sub-processors
| Sub-processor | Role | Location / residency |
|---|---|---|
| Google Cloud / Firebase | Core hosting, database, storage, authentication, serverless functions, app attestation | UK (europe-west2, London) for the data plane |
| Stripe | Card payments and invoicing | UK/EU and US-headquartered; card data is out of our scope entirely (Stripe is PCI-DSS certified). Any transfer outside the UK is under Stripe's standard contractual clauses (or equivalent transfer mechanism) |
| Cloudflare | CDN, DNS, WAF, Turnstile bot protection | Global CDN network, US-headquartered; any transfer outside the UK is under Cloudflare's standard contractual clauses (or equivalent transfer mechanism) |
| Google Workspace (SMTP) | Transactional / notification email | US-headquartered (Google LLC) / Ireland (Google Ireland Ltd); any transfer outside the UK is under Google's standard contractual clauses (or equivalent transfer mechanism) |
| Ordnance Survey / Google Places | Address-to-UPRN resolution and address autocomplete (address strings only — no tenant personal data) | Ordnance Survey: UK. Google Places: US-headquartered; any transfer outside the UK is under Google's standard contractual clauses (or equivalent transfer mechanism) |
| EPC register (gov.uk) | Energy-performance lookups for a property (address/property identifiers only) | UK — a public register |
| Google (AI Studio) — public docs assistant only | Powers the public documentation assistant on our website; no Customer or Tenant Personal Data | US-headquartered; touches only public marketing/documentation content |
Marketing-website analytics and advertising (consent-based)
Set only if you accept our cookie-consent banner — see the Cookie Notice.
| Provider | Purpose | Location |
|---|---|---|
| Meta (Meta Pixel) | Advertising and campaign measurement | Meta Platforms Ireland Ltd / Meta Platforms, Inc. (US-headquartered); transfer under Meta's standard contractual clauses |
| LinkedIn (Insight Tag) | Advertising and campaign measurement | LinkedIn Ireland Unlimited Company / LinkedIn Corporation (US-headquartered); transfer under LinkedIn's standard contractual clauses |
| Google (Firebase Analytics / Google Analytics 4) | Website usage analytics; also the portal/app's automatic product analytics (no cookie banner in signed-in products) | Google Ireland Limited / Google LLC (US-headquartered); transfer under Google's standard contractual clauses |
| Google (Firebase Performance Monitoring) | Website and portal loading-speed / technical-performance measurement | Google Ireland Limited / Google LLC (US-headquartered); transfer under Google's standard contractual clauses |
| Google (Firebase Crashlytics) | Native crash reporting in the mobile apps only | Google Ireland Limited / Google LLC (US-headquartered); transfer under Google's standard contractual clauses |
Customer-keyed AI providers (the Controller's own choice, not ours)
If a customer enables advisory AI assistance on survey content, that processing runs on the customer's own AI provider account and API key — for example Anthropic, Azure OpenAI, OpenAI, Google, or a compatible endpoint the customer configures. That processing is governed by the customer's own agreement with the provider it chooses, not by any agreement of ours. We store the key server-side only, scope its use strictly to that customer, refuse AI actions on finalized records, and fail closed when no key is configured. This row is listed here for transparency only.
| Provider type | Purpose | Engaged when |
|---|---|---|
| AI provider (Anthropic / Azure OpenAI / OpenAI / Google / BYO endpoint) | Advisory survey-content drafting and photo analysis — advisory only, never enters the sealed evidence record automatically | The customer adds their own key in Settings → AI |
| Identity provider (Microsoft Entra ID) | Single sign-on for the customer's own staff | The customer connects SSO on an eligible plan |
External data sources — no personal data sent
Some features call public data services keyed on location, not identity; no resident personal data is transmitted:
- Weather normals / current conditions (by coordinates or postcode).
- Soil data (by coordinates).
- Map tiles (by coordinates).
- UK EPC register lookup (by address/postcode, via a server-side key).
Changes and notification
We will give at least 30 days' prior notice of any intended addition or replacement of a sub-processor, by updating this page and, where you have subscribed, notifying your organisation administrators, giving you a reasonable opportunity to object on reasonable data-protection grounds (see the DPA, clause 5.3).
ProSurvey Apps Limited · registered in England and Wales, company number 17118570 · HousingSurvey Pro™.
Changelog
- v2.4 (14 July 2026) — Full UK-law B2B SaaS suite drafted (W-E1), published live (W-E2/H-LEGAL-PUBLISH). Supersedes the v1.0 short-form page.