Sub-processors
Last updated: 02/05/2026
This page lists the third-party sub-processors that Beecredo Ltd ("ContractShield", "we") engages to process Customer Personal Data on behalf of our customers in the provision of the Service. It is the canonical, current list referenced by our Data Processing Agreement and Privacy Policy.
A "sub-processor" is a third party that we engage to process personal data on our behalf in connection with the Service.
Current sub-processors
| Sub-processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Anthropic PBC | AI processing of contract content via the Claude API | USA | Anthropic Commercial Terms; Anthropic DPA; UK IDTA / UK Addendum to EU SCCs |
| Stripe Payments Europe Ltd | Payment processing | Ireland / USA | Stripe DPA; UK IDTA / UK Addendum to EU SCCs |
| DigitalOcean | Cloud hosting | London, UK | Provider DPA; ISO 27001 / SOC 2 |
| Postmark (ActiveCampaign) | Transactional email | USA | Provider DPA; UK IDTA / UK Addendum to EU SCCs |
| Google Analytics | Product analytics | USA | Provider DPA |
Note on AI processing
Content you upload is transmitted to Anthropic PBC for processing. Under Anthropic's Commercial Terms of Service, Anthropic is contractually prohibited from using API inputs or outputs to train its models. Anthropic retains API data for a maximum of 30 days for the purpose of abuse monitoring, unless we have a Zero Data Retention (ZDR) arrangement in place, in which case data is not stored at rest after the API response is returned (except as strictly required for abuse screening).
International transfers
Where Customer Personal Data is transferred outside the UK, we rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with supplementary measures where required by applicable guidance.
Change notifications
We will notify customers at least 30 days before adding or replacing a sub-processor, by email to the address on the account and/or by updating this page. You may object on reasonable data-protection grounds within 14 days of notification. If we cannot accommodate your objection, you may terminate the Service and receive a pro-rata refund of prepaid fees for the unused period, as set out in our DPA.
To subscribe to change notifications, email support@contractshield.co.uk with the subject line "Sub-processor notifications".
History of changes
| Date | Change |
|---|---|
| 02/05/2026 | Initial publication. |
Contact
Questions about our sub-processors can be sent to support@contractshield.co.uk.