Home / Privacy policy / Subprocessors
Subprocessors.
Who processes data on our behalf, what they handle, where it sits, and the safeguards that apply.
This page lists the subprocessors Gysho Limited ("Gysho," "we," "us," or "our") uses to provide our Services, as referenced in Section 5 of our Privacy Policy. It sets out each subprocessor's role, the categories of data they handle, where that data is located, and the safeguards applied to any international transfer.
01 · Published by
| Company | Gysho Limited |
| Company number | 11262484 |
| Registered office | Sussex Innovation Centre, Science Park Square, Brighton, East Sussex, England, BN1 9SB, United Kingdom |
| VAT number | GB 500 4861 27 |
02 · Our subprocessors
We share personal data with the subprocessors below, and only as needed to provide our Services. Each is bound by a data processing agreement.
| Subprocessor | Purpose | Data categories | Data location | Transfer safeguard | DPA link |
|---|---|---|---|---|---|
| Microsoft (Azure) | Cloud infrastructure & AI services (servers, storage, inference). | Client application data hosted on Azure. | EU; UK South for UK deployments. | EU-UK adequacy. | Microsoft Products & Services DPA |
| Hetzner | Cloud infrastructure (servers, networking, storage). | Client application data hosted on EU sovereign solutions. | Germany (Nuremberg, Falkenstein); Finland (Tuusula), EEA. | N/A (EEA only). | Hetzner legal and privacy policy |
| HubSpot | CRM, digital signature. | Name, email, phone, company, interaction metadata. | Hosted inside EU. | EU-UK adequacy. | HubSpot DPA |
| Scaleway | AI inference compute (transient). | Inference payloads; no persistent retention. | France (Paris), EEA. | N/A (EEA only). | Scaleway DPA (2024, EN PDF) |
| Nebius | AI inference compute (transient). | Inference payloads; no persistent retention. | EEA (e.g. Amsterdam). | N/A (EEA); SCCs annexed for any onward transfer. | Nebius DPA (B.V.) |
| Xero | Billing & accounting. | Billing contact data, invoice line items, customer & employee contact details. | United States (hosted on AWS infrastructure). | EU Standard Contractual Clauses, per Xero's Data Processing Addendum. | Xero Data Processing Terms |
03 · Keeping this list current
We review and update this list when a subprocessor changes, is added, or is removed. If you have questions about a specific subprocessor or want notice before a new one is engaged, contact us at alert@gysho.com.