Sub-processors
The third parties Altix uses to deliver the service. We notify firm owners by email at least 30 days before adding a new sub-processor.
Effective 29 April 2026
Current list
| Sub-processor | Purpose | Region |
|---|---|---|
| Supabase | Database (PostgreSQL), authentication, file storage for ID and certificate photos. | EU (eu-west-2 / Ireland) |
| Vercel | Application hosting and edge runtime. | Global edge with EU primary; logs in the United States. |
| Resend | Transactional email (expiry alerts, team invitations). | United States — covered by SCCs and the UK IDTA. |
International transfers
Where personal data leaves the UK or EU (for example, log aggregation in the United States), the transfer is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, plus supplementary measures including encryption in transit and application-layer encryption of the most sensitive identifiers.
Notifying you of changes
We will notify firm owners by email at least 30 days before adding or replacing a sub-processor. If you object on documented data-protection grounds, you may terminate your subscription within 30 days and recover any unused prepaid fees.