Sub-processors
Version 1.1 · Effective 01 September 2026
| Sub-processor | Purpose and data | Processing location and safeguard |
|---|---|---|
| OVHcloud (dedicated server operated by Fleeta Limited) | application hosting, database and file storage (London); encrypted image backups to OVHcloud in the EU | United Kingdom (primary), EU (backup copies) |
| Microsoft Ireland Operations Ltd (Microsoft 365) | sending and receiving email: alerts, digests, consent and report links, and the support mailbox | UK / EU |
| OpenAI, L.L.C. | (1) reading text from a driving-licence photo when a user selects "Read licence photo" - the image is sent once, processed and not retained for training; (2) machine translation of our own website and blog text (no personal data) | USA - UK IDTA / Data Processing Addendum |
| Ahrefs Pte. Ltd. (Ahrefs Web Analytics) | cookie-free public-site analytics: page URL, referrer, browser/device and language information, and city/country derived from the IP address. The raw IP address is discarded; the daily salted visitor hash and salt are deleted within 24 hours | Singapore / USA - Ahrefs Data Processing Addendum and standard contractual clauses |
| Google Ireland Limited / Google LLC (Google Analytics 4) | optional public-site analytics after consent: pseudonymous browser/session, page, campaign, signup-event and coarse-location data. We do not send names, email addresses, operator records or driver records | EU / USA - Google data processing terms and standard contractual clauses |
| Google LLC (Google Maps Platform) | the free DVS zone map page only: the postcode or addresses you enter for geocoding, plus connection data such as IP address | USA / EU - Google Cloud data processing terms |
| Stripe Payments Europe Ltd | subscription billing, card processing and invoices (when online payment is enabled) | EU / USA - standard contractual clauses |
| Cloudflare, Inc. | authoritative DNS for operatorcompliance.co.uk only (no traffic or content passes through Cloudflare) | global |
| DVSA and DVLA (data sources, not processors) | vehicle and driver records queried on your instruction | United Kingdom |
We give 14 days' notice of changes by email to account owners.