Subprocessors

Subprocessors

The third-party service providers Firmtalk uses to deliver this website and handle the enquiries submitted through it. We require each subprocessor to honour confidentiality, security and data-protection obligations consistent with our customer commitments.

Last updated: 2 August 2026

01

How we use subprocessors

A subprocessor is a third party that processes personal data or Customer Data on our behalf to help us run the Firmtalk website and platform. We minimise the data we share with each one, contract for confidentiality and security obligations, and review every subprocessor before they are added to this list.

The list below is complete as of the date above and covers the providers we use to run the Firmtalk website and the enquiries submitted through it. We do not list providers we are merely evaluating; a provider appears here before it begins processing data on our behalf, not after.

We will notify customers in advance of material changes to this list. If your firm has a written agreement with us that requires a different notice mechanism, that agreement controls.

02

Hosting & infrastructure

VendorPurposeData processedLocation
Amazon Web Services, Inc.Website hosting and compute; storage of enquiries submitted through our formsRequest metadata; name, email, phone, organisation, message bodyIndia (ap-south-1, Mumbai)
03

Communications

VendorPurposeData processedLocation
Google LLC, Gmail (SMTP)Transactional and contact-form email deliveryName, email, phone, organisation, message bodyGlobal
04

Security & abuse prevention

VendorPurposeData processedLocation
Google LLC, reCAPTCHA v2Bot and abuse protection on web formsIP address, mouse / interaction telemetryGlobal
05

Analytics

VendorPurposeData processedLocation
PostHog, Inc.Site usage analytics, conversion tracking and session replay. Loaded only if you accept analytics cookiesPage views, country, referrer; a recording of your session on this site, covering pages viewed, clicks, scrolling and navigation, and browser console output; on form submission, name, email and organisation. Values you type into form fields are masked and are not recordedUnited States
06

Data residency

Enquiries you submit through this website are stored on our infrastructure in the Mumbai (ap-south-1) region and emailed to us. Analytics events and session recordings, if you accept analytics cookies, are processed by PostHog in the United States. Nothing is sent to PostHog before you accept; if you decline, or later withdraw consent, no recording is made.

For deployments where Firmtalk stores Customer Data, we will confirm the region of primary storage in the order form or associated data processing agreement, and any additional subprocessor involved will be added to this list first.

07

AI and model training

We do not use Customer Data to train artificial-intelligence or machine-learning models for our benefit or for the benefit of third parties. No AI or machine-learning subprocessor appears on the list above, because none currently processes data on our behalf.

Where we later rely on a third-party AI provider to deliver a feature you have asked for, we will add it to this list under the same notice and review process, and contract for terms that prohibit that provider from training on your data.

08

Questions or objections

If you would like to receive notice of changes to this list, or you have a concern about a specific subprocessor, email us at hello@firmtalk.ai. If you are an enterprise customer, please copy your account contact at Firmtalk.

Questions about this policy? Email us at hello@firmtalk.ai.