Sub-processors
Version 1.0 — Last updated: 13 May 2026
This is the current list of third parties that may process personal data on behalf of Totalinfo Ltd. We give 30 days' notice (in-app banner + your account email) before adding a new sub-processor.
Core infrastructure
| Sub-processor | Purpose | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting (VPS) | All application + DB data | Germany (EEA) | EU adequacy |
| MongoDB (self-hosted on Hetzner) | Database | All persisted data | Germany | Within EEA |
| Cloudflare | DNS, TLS termination, DDoS protection | IP addresses, TLS metadata | Global edge | UK / EU SCCs |
| Sentry (Functional Software Inc.) | Error monitoring | Stack traces, anonymised user IDs | USA | UK addendum + SCCs |
Payment processing
| Sub-processor | Purpose | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Stripe Inc. | Card payments, subscription billing, refunds, customer portal | Cardholder name, billing address, card token (Stripe-tokenised, never seen by us), invoice history | Ireland + USA | UK addendum + SCCs |
AI providers
We route AI calls through OpenRouter by default for zero-data-retention (ZDR) compliance. Direct provider use is opt-in only.
| Sub-processor | Purpose | Data processed | Location | Transfer mechanism | ZDR |
|---|---|---|---|---|---|
| OpenRouter Inc. | Routing layer for all AI providers | Prompts, completions | USA | UK addendum + SCCs | ✅ (default) |
| Anthropic PBC | Claude language models | Prompts, completions | USA | UK addendum + SCCs | ⚠️ Direct only — disabled by default |
| OpenAI L.L.C. | GPT language models | Prompts, completions | USA | UK addendum + SCCs | ⚠️ Direct only — disabled by default |
| Google LLC | Gemini language models | Prompts, completions | USA | UK addendum + SCCs | ⚠️ Direct only — disabled by default |
| Moonshot AI | Kimi language models | Prompts, completions | China / via OpenRouter | OpenRouter SCC chain | ✅ via OpenRouter only |
Data enrichment
| Sub-processor | Purpose | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Hunter.io (SAS Hunter) | B2B email discovery | Company names, domains | France (EEA) | EU adequacy |
| Companies House (UK Gov) | Public company filings | Public companies' names + officer data | UK | Public registry |
| EPO (European Patent Office) | Patent applicant search | Public patent applicant names, abstracts | Germany (intergovernmental) | EU adequacy |
| CRO Ireland | Irish company filings | Public companies + officers | Ireland (EEA) | EU adequacy |
| JobSpy proxy | Job-board aggregator | Public job postings | USA | UK addendum + SCCs (optional, not used by default) |
| Fundz | Funding announcements | Publicly announced funding rounds | USA | UK addendum + SCCs (optional, not used by default) |
Communication
| Sub-processor | Purpose | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Your configured SMTP relay | Sending transactional + outreach email | Recipient name + email, message body | Depends on your provider | You select |
By default we recommend a UK/EU-resident SMTP provider (e.g. Mailtrap, ProtonMail Business, Amazon SES in EU region). The platform supports any SMTP server.
Optional
| Sub-processor | Purpose | When used |
|---|---|---|
| GitHub Inc. | Social login (OAuth) | Only if GITHUB_OAUTH_CLIENT_ID env var is set |
How to object
If you object to a sub-processor, email richard@ipr.guru within 30 days of the notice. We will try to find an alternative. If we cannot, you may terminate the affected service with no penalty.
Removed sub-processors (audit trail)
(none yet — this section grows as the list evolves)