Sub-processors
Last updated: 9 November 2026.
These are the companies that help us run getSoapy and handle your customers' personal data on our behalf. Under our terms we're your processor, and they're our sub-processors. Each one can use the data only to provide its service to us, under a contract that protects it at least as well as our terms do.
Changes. We'll email the account owner of every business, and update this page, at least 30 days before we add or replace a sub-processor. If we have to replace one urgently, we'll tell you as soon as we can. If you object, Schedule 1 of our terms explains what happens.
Sub-processors
| Company | What it does for us | Where it handles data |
|---|---|---|
| Amazon Web Services | Hosting, database and file storage. Sending email. Push notifications to your team's phones. Reading expense receipts. Serving pages quickly | London. Push notifications go through Ireland. Pages are served from locations worldwide |
| Apple and Google | Delivering push notifications to your team's phones | United States |
| OpenAI | Our AI features: Sid, writing help, document templates, importing spreadsheets, turning recordings into text, and fraud checks. Usage policies | United States |
| Voodoo SMS | Sending texts | UK |
| Twilio | Phone numbers, calls, call recordings and texts sent from a number | United States |
| HERE | Maps, drive times and route planning | Ireland, the Netherlands, Germany, the UK, the United States, Singapore and Japan |
| Mapbox | Address search, maps and route planning | United States, with copies cached worldwide |
| Geoapify | Route planning | European Union |
| Lunch Flow | Bank feeds | UK |
| GoCardless Bank Account Data | Bank feeds | UK |
| Synci | Bank feeds for some older connections | European Union |
| Sentry | Spotting errors in the app | United States |
Our AI providers have agreed not to use your data to train their models.
Companies that also use data for their own purposes
These companies get data from getSoapy to provide their service, and also use it for their own purposes under their own privacy policies.
| Company | What it does | Its privacy policy |
|---|---|---|
| Stripe | Taking payments, paying out and checking identity | stripe.com/privacy |
| Maps, finding addresses and planning routes, and spam protection on forms | policies.google.com/privacy |
Services you choose to connect
These aren't our sub-processors. We send them data only because you've connected them, and their own terms apply.
- HMRC, when you send a Making Tax Digital update.
- Xero, when you connect your Xero account.
- Zapier, and any other app you connect through our API, our connection for AI assistants, or webhooks.
