- Version
- subprocessors-v1
- Effective date
- 2026-10-23
Subprocessor register
Certinance uses the following services in operating its application. Whether a supplier is a subprocessor for customer-controlled documents or a separate controller depends on the processing activity. This register does not state that personal information is stored exclusively in the United Kingdom.
| Provider | Function | Personal information involved | Processing role |
|---|---|---|---|
| Google / Firebase | Authentication, Firestore organisation and certificate metadata, website hosting | Identity, account information, metadata and application records | Processor/subprocessor for hosted customer-controlled data; separate roles may apply to account/usage information |
| Cloudflare | Workers, authentication and document gateway, infrastructure security | Request data, access controls and PDF data passing through the gateway | Processor/subprocessor for customer-controlled data passing through the Worker, subject to applicable service terms |
| Cloudinary | Private PDF asset storage and authorised retrieval | Certificate PDFs and asset references | Subprocessor for customer-controlled documents |
| Stripe | Subscription billing, Checkout and Customer Portal when enabled | Billing identities, addresses, payment and subscription information | Role depends on processing activity, including Stripe's independent responsibilities |
| Resend | Transactional email where enabled | Recipients, addresses and message content | Provider role depends on active email workflow |
Some providers and their subprocessors may process or access information outside the UK. For details of current locations, further subprocessors and transfer arrangements, see the relevant providers' published notices and agreements, or contact privacy@certinance.co.uk. Certinance uses applicable contractual safeguards or adequacy provisions where a restricted transfer requires them.
Public supporting information
subprocessors-v1 · Effective 2026-10-23.