These are the third parties that process our customers’ personal data on our behalf when we provide Ayiza, as described in our Data Processing Agreement. We email the administrators of every Ayiza account at least 30 days before we add or replace a subprocessor.
| Subprocessor | What it does for us | Customer data it processes | Where | Transfer safeguard |
|---|---|---|---|---|
| Microsoft (Microsoft Azure) | Hosting: application servers, database, file storage, backups and logs | All customer data stored in Ayiza | United Kingdom (UK South, with backup copies in UK West) | Not needed: data stays in the UK |
| [Current hosting provider] | Hosting of the current Ayiza servers until our move to Microsoft Azure is complete | All customer data stored in Ayiza | [Location] | [Safeguard] |
| Anthropic | AI model for the Ayiza AI assistant (the default model) | Questions to the assistant, the conversation so far, the records the assistant reads to answer, and attachments | United States | [Safeguard] |
| OpenRouter | Routes assistant requests to models from OpenAI, Google and Mistral when a user chooses one of them. We instruct OpenRouter to use only model providers that do not store prompts or use them for training. | The same data as for Anthropic, for those requests only | United States; model providers in the United States and the EU | [Safeguard] |
| Mailgun (Sinch) | Receives emails sent to the AI assistant and sends its replies | Emails and attachments sent to the assistant, and its answers | European Union (Mailgun EU region) | UK adequacy regulations for the EEA |
| [Service email provider] | Sends service emails such as invitations, password resets and sign-in codes | Names and email addresses of users, and the content of those emails | [Location] | [Safeguard] |
| Sentry (Functional Software) | Error monitoring | Technical details of errors. Sentry is configured not to collect personal data by default, but error details can contain record identifiers. | [Location] | [Safeguard] |
Services that receive data on your instruction
These services receive data only when you or your users choose to use them. They act under their own terms and are not our subprocessors.
- HMRC and Companies House receive the returns and accounts you file through Ayiza.
- The European Commission’s VIES service receives the VAT numbers the assistant checks, if your administrator has switched this on.
- Telegram carries the messages and files your users exchange with your company’s Ayiza bot. These messages are not end-to-end encrypted.
- Stripe receives the invoice details needed to collect payment when you connect your own Stripe account for customer payments.
- An AI provider you connect with your own API key receives the assistant’s requests under your own contract with it.
- AI tools your users connect through the MCP server, such as Claude or ChatGPT, receive the data those users ask them to work with.