Legal · last updated 22 September 2026
Sub-processors
The providers that process personal data for SYSTMS, what they do and where.
These are the providers that process personal data on our behalf to run SYSTMS. We give at least 30 days' notice here and by email before adding one, as set out in our data processing agreement.
| Provider | What they do for SYSTMS | Where | Transfer safeguard |
|---|---|---|---|
| Base44 | Application hosting, database, file storage, sign-in and backend functions | USA and EU (cloud infrastructure) | IDTA / SCCs with UK Addendum |
| Anthropic | AI models (Claude) for drafting, reading documents, scheduling, automations and the assistants | USA | IDTA / SCCs with UK Addendum; no training on customer data under commercial terms |
| OpenAI | Speech-to-text transcription of voice notes, as a fallback | USA | IDTA / SCCs with UK Addendum; no training on API data |
| Stripe | Subscription billing and payment processing | USA and Ireland | UK Extension to the EU–US Data Privacy Framework / SCCs |
| Twilio | WhatsApp and SMS messages sent by SYSTMS | USA | IDTA / SCCs with UK Addendum |
Services you choose to connect
These only receive data when a business connects them, and act under that business's own agreement with them, not as our sub-processors: Zoho (CRM, Books, Calendar, WorkDrive, Bigin), Google (Calendar, Analytics, Search Console, Gmail), Microsoft (Outlook), Notion, Pocket, WhatsApp (Meta), and any calendar feed or MCP server the business adds.