New to government contracts?Start with your free gap analysis
Service information

Subprocessors and International Transfers

The providers supporting Crown Partners, the information they handle and international processing considerations.

This document

Version: 2026-10-24

Effective: 24 October 2026

Find a section

The providers below support the service. A supplier is a subprocessor where it processes customer-controlled personal data on our behalf. For account administration and some payment, fraud-prevention and legal purposes, suppliers may instead act as independent controllers. The relevant supplier agreement identifies the contracting entity and its obligations. This page does not promise UK-only storage or processing.

DigitalOcean provides application and database hosting. It handles account and workspace data, files and operational records needed to run the service. Hosting location alone does not establish the location of all support access or backup copies. DigitalOcean is a US-based provider with international infrastructure and subprocessors. Its published Data Processing Agreement describes its transfer safeguards, including applicable Data Privacy Framework protection and contractual safeguards. Contact us for the deployment and backup locations applicable to a specific data-location requirement; we do not offer a UK-only commitment through these standard terms.

Resend delivers transactional email, including account verification, invitations and service notifications. It handles recipient addresses, message content and delivery metadata. Resend states that customer data, including message content and delivery logs, is stored in the United States. Its Data Processing Addendum sets out contractual transfer safeguards and applicable Data Privacy Framework arrangements. Email delivery does not require access to the whole company workspace.

Stripe processes payments and subscription transactions. Relevant information includes customer contact and billing details, transaction references, amounts and payment information supplied to Stripe. Crown Partners does not store full payment-card details. Stripe acts as processor for some services and as an independent controller for purposes such as its own fraud prevention and legal compliance. Stripe operates internationally, including in the United States. Its Data Transfers Addendum describes the UK Addendum and applicable Data Privacy Framework protection; its Privacy Policy explains independent processing.

OpenAI processes task-relevant inputs and outputs for AI assistance and report generation. The Privacy Notice and AI Transparency Notice describe the scope of data used by each feature and customer permissions. Processing may take place in the United States and other locations used by OpenAI and its subprocessors. No UK-only or EU-only processing arrangement is promised for the standard service.

OpenAI’s published API policy says business data is not used for training by default unless the customer opts in. Standard abuse-monitoring logs may retain inputs and outputs for up to 30 days, with exceptions such as legal requirements; retention can differ by endpoint and feature. A request not to store an API response does not itself remove those logs. We do not represent the service as having an agreed zero-retention arrangement. The linked OpenAI DPA and data controls explain its contractual safeguards and retention scope.

Google Analytics measures visits and engagement on public marketing pages only after a visitor opts in. This can include page views, scrolling, outbound clicks, file downloads, embedded video engagement and starts or successful submissions of the demonstration enquiry form. Site-search measurement and automatic form-interaction measurement are disabled, so search terms and form values are not sent. Page paths and referrers are sent without query strings; Google email and query-parameter redaction is also enabled. Google Signals and advertising personalisation are disabled. Google receives standard technical request information such as IP address and browser/device details. Identifier-associated event and user data retention is configured to 14 months, with reset-on-new-activity disabled; Google states that most standard aggregated reports are not affected by this setting. The tag does not run on sign-in, account or company workspace pages. Google Analytics is a public-site measurement provider and does not process customer-controlled workspace content for Crown Partners under the Data Processing Addendum. See Google’s published information about how it uses data from sites that use its services and its Analytics terms.

Restricted transfers require an applicable UK adequacy regulation or appropriate safeguards, such as the UK IDTA or UK Addendum to standard contractual clauses, with the required assessment and supplementary measures. Supplier certifications or published terms do not mean every service or transfer is automatically covered. We must apply the mechanism relevant to the service and destination.

You can request information about the safeguards relevant to your data, including a copy with appropriate confidential details redacted, at enquiries@crownpartners.co.uk. If you need a particular country, backup location or shorter supplier retention period, contact us before providing data subject to that requirement so that we can establish whether it can be met.

The Data Processing Addendum provides general authorisation for listed subprocessors and requires written advance notice of a new or replacement subprocessor, with an opportunity to raise a reasonable data-protection objection. Keep the account owner’s email current. Supplier links below provide their own current terms and onward-provider information; they do not replace our obligations to you.

Organisation details

Crown Technology Limited is a private limited company registered in England and Wales. Company number 17393089. Registered office: 9 Redwood Gardens, Thornton-Cleveleys, England, FY5 5NT. Email: enquiries@crownpartners.co.uk.

Start here · Free Procurement Gap Analysis

Where does your business stand today?

Answer clear guided questions. Get your personal summary and clear next steps.

Start my free gap analysis Free account. No payment required. Save and return anytime.