Skip to main content

Legal & data protection

Sub-processors

The organisations that handle information on our behalf, what they do, and what we have not yet confirmed about them.

v0.9 (pre-release) · Provider evidence outstanding — not yet in force

Pre-release document — not yet in force

MW Compliance Hub is not yet open to customers and does not hold information about real people. These pages are published early so they can be read and challenged before anyone signs up. They take effect only when the platform is released for real use, and some points below are still outstanding — they are shown as outstanding rather than filled in with a guess.

Current list

WhoWhat they doWhereStatus
Managed cloud hosting and database providerRuns the application and stores the database and file uploadsIreland (stated by the provider's console; written confirmation outstanding)In use for the pre-release platform
AI service used by assistant featuresAnswers a question at the moment it is asked; records are not used to train modelsNot confirmed in writingAvailable but switched off — no customer information is sent
Transactional email deliverySends sign-in, reset and service messagesNot confirmed in writingIn use for sign-in messages only

What is not yet confirmed

Still outstanding

  • Each provider's own written terms for handling information on our behalf, and its own list of the organisations it uses.
  • The complete list of countries in which information is handled, and the arrangement that would cover any handling outside the UK.
  • How long each provider keeps copies after deletion, including in backups.
  • How and how quickly each provider would tell us about a security incident.
  • Until this is in writing, no real personal information is handled on the platform.

We will publish a dated change to this page before adding or replacing any provider, so customers can object.