Sub-processors
Draft. The hosting provider is not settled yet, so one row is still a placeholder. Everything else on this page is accurate today.
These are the companies that handle any part of a firm’s data on Colendo’s behalf. Each is bound by terms no weaker than the data processing agreement, and Colendo stays responsible for what they do. Firms are given at least 30 days’ notice by email before this list changes.
| Who | What they do | What they see | Country |
|---|---|---|---|
| [HOSTING PROVIDER] | Runs the application, the database and the document storage | Everything held in the product | United Kingdom / EU |
| Resend | Delivers email to firms and their clients | Recipient name and email address, subject and message text | United States |
| Svix | Delivers Resend’s bounce and delivery notifications back to Colendo | Message identifiers and delivery outcomes | United States |
| Paddle.com Market Ltd | Takes payment as merchant of record, and handles VAT | Billing name, email and payment details. Never client documents | United Kingdom |
| Sentry (Functional Software, Inc.) | Reports errors so faults can be found and fixed | Technical error reports. Configured to the EU region | Germany (EU region) |
Documents stay in the UK and EU
The files a client uploads, and the database that holds who they belong to, never leave the UK and EU. What does cross a border is narrower and listed above: the name and address an email goes to, billing details, and technical error reports. Those transfers rely on the UK’s approved safeguards.
Built, but switched off
Two more exist in the product and are not in use. They are listed because they are the ones that would change the answer above, and a firm should hear about them here rather than find out afterwards.
| Who | What they do | What they see | Country |
|---|---|---|---|
| Twilio | WhatsApp and SMS reminders — not in use | Would carry a client mobile number and message text | United States |
| Anthropic | Checking an uploaded file is the document that was asked for — not in use | Would carry the uploaded document image | United States |
Not on this list
There is no analytics, no advertising, no session recording and no chat widget on any page where a firm or its clients are signed in. Fonts are served from Colendo’s own domain, so visiting the site does not announce itself to a font provider. Uploaded files are not sent to any third party to be read, checked or processed.