Subprocessors

Subprocessors

The third-party service providers Firmtalk uses to deliver the website and platform. We require each subprocessor to honour confidentiality, security and data-protection obligations consistent with our customer commitments.

Last updated: 25 May 2026

01

How we use subprocessors

A subprocessor is a third party that processes personal data or Customer Data on our behalf to help us run the Firmtalk website and platform. We minimise the data we share with each one, contract for confidentiality and security obligations, and review every subprocessor before they are added to this list.

We will notify customers in advance of material changes to this list. If your firm has a written agreement with us that requires a different notice mechanism, that agreement controls.

02

Hosting & infrastructure

VendorPurposeData processedLocation
Netlify, Inc.Website hosting, CDN, edge functionsRequest metadata, anonymised IPGlobal edge; primary US
[Cloud provider for the product backend, e.g. AWS / Azure / GCP]Application servers, object storage, databasesCustomer Data (matters, documents, financial records)[Region, confirm before publishing]
03

Communications

VendorPurposeData processedLocation
Google LLC, Gmail (SMTP)Transactional and contact-form email deliveryName, email, phone, organisation, message bodyGlobal
Google LLC, reCAPTCHA v2Bot/abuse protection on web formsIP address, mouse / interaction telemetryGlobal
04

Productivity & document collaboration

VendorPurposeData processedLocation
Microsoft Corporation, Microsoft 365 / Azure ADDocument co-authoring, SSO (when enabled by your firm)Document content, identity attributesYour firm's Microsoft 365 tenancy
Google LLC, Google WorkspaceDocument co-authoring (when enabled by your firm)Document content, identity attributesYour firm's Google Workspace tenancy
05

Analytics

VendorPurposeData processedLocation
[Analytics provider once enabled, e.g. Plausible / GA4]Aggregate site usage analyticsAnonymised page views, country, referrer[Region]
06

Data residency

Where customers require Customer Data to remain in their own tenancy (for example, documents inside your firm’s Microsoft 365 or Google Workspace), Firmtalk operates against that tenancy and does not copy Customer Data into our own stores beyond what is strictly required to deliver the requested feature.

For deployments where Firmtalk stores Customer Data, we will confirm the region of primary storage in the order form or associated data processing agreement.

07

AI and model training

We do not use Customer Data to train artificial-intelligence or machine-learning models for our benefit or for the benefit of third parties. Where the product uses third-party AI providers to deliver a feature you have asked for, we contract for terms that prohibit those providers from training on your data.

If we begin to rely on additional AI subprocessors for in-product features, we will add them to this list with the same notice and review process.

08

Questions or objections

If you would like to receive notice of changes to this list, or you have a concern about a specific subprocessor, email us at hello@firmtalk.ai. If you are an enterprise customer, please copy your account contact at Firmtalk.

Questions about this policy? Email us at hello@firmtalk.ai.