Subprocessor Register

Last updated: 2026-07-03

UniAsset engages the third parties below to help provide the service. Each is bound by a data processing agreement with obligations no less protective than those in our Data Processing Agreement. Where a subprocessor may process personal data outside the UK, an appropriate transfer safeguard (such as the UK IDTA or the UK Addendum to the EU SCCs) is in place.

SubprocessorPurposeData processedLocationTransfer safeguard
Microsoft Azure (Blob Storage)
Storage
Encrypted storage of uploaded documents, images and work-order photos.Files uploaded by customers, which may contain personal data.Microsoft Azure — region as configured for the deployment.UK IDTA / EU SCCs where applicable (Microsoft DPA).
Vercel Inc.
Infrastructure
Application hosting, serverless compute and content delivery.Account, asset and technical data transiting the application; request metadata (IP, user agent).United States (global edge network).EU SCCs + UK Addendum (Vercel DPA).
Prisma Data, Inc. (Prisma Accelerate) + PostgreSQL host
Database
Managed connection pooling and query caching for the primary PostgreSQL database.All application data, including account and personal data stored in the database.Cloud-hosted PostgreSQL with Prisma Accelerate edge pooling.EU SCCs + UK Addendum where processing occurs outside the UK.
Resend (Plus Five Five, Inc.)
Email
Delivery of transactional and notification emails.Recipient name and email address, and email content.United States.EU SCCs + UK Addendum (Resend DPA).
Razorpay Software Private Limited
Payments
Payment processing and subscription billing (India region).Billing contact details and transaction metadata. Card data is handled by the provider; UniAsset does not store it.India.EU SCCs + UK Addendum / provider DPA.
Dodo Payments
Payments
Payment processing and subscription billing (international region).Billing contact details and transaction metadata. Card data is handled by the provider; UniAsset does not store it.As per the Dodo Payments DPA.EU SCCs + UK Addendum / provider DPA.

We will update this register before adding or replacing a subprocessor and, where required, provide advance notice so customers can raise reasonable objections.