Sub-processors
Version 2.0 · Last updated: 27 October 2026 · Albion Wealth Services, Ltd
Providers that Albion Wealth Services, Ltd uses to deliver the service and that may process personal data on behalf of customers.
This list is Annex III to the Data Processing Agreement (DPA). We give at least 15 days’ notice of any new or replacement sub-processor. To receive these notices or to raise an objection, write to contact@albionwealthservices.com.
Current list · 27 October 2026
Supabase, Inc.
- Purpose
- Database and authentication for the panel (accounts, settings, balance, usage history)
- Data
- Account data, settings, billing, encrypted access tokens
- Location
- Ireland (EU, eu-west-1)
- Safeguard
- Within the EEA
Hetzner Online GmbH
- Purpose
- Server for the assistant engine (orchestration, conversation database, email service)
- Data
- Messages, processed emails, tasks, contacts, activity logs
- Location
- Nuremberg, Germany (EU)
- Safeguard
- Within the EEA
Vercel Inc.
- Purpose
- Hosting and running of the web panel and its APIs
- Data
- Panel traffic, technical logs, content in transit
- Location
- Global (edge network); functions in the configured region
- Safeguard
- Standard contractual clauses / EU-US Data Privacy Framework
Twilio Inc.
- Purpose
- Messaging (WhatsApp, SMS) and voice; phone numbers
- Data
- Phone numbers, content of messages and calls, metadata; identity and address documents you upload to verify a number of your own (sent directly to the carrier, not kept by Albion)
- Location
- United States / EU / United Kingdom
- Safeguard
- Standard contractual clauses / EU-US Data Privacy Framework
Meta Platforms Ireland Ltd. (WhatsApp Business Platform)
- Purpose
- Delivery of WhatsApp messages and registration of WhatsApp Business numbers
- Data
- Phone numbers, message content, metadata
- Location
- Ireland / United States
- Safeguard
- Standard contractual clauses / EU-US Data Privacy Framework
Telnyx LLC
- Purpose
- Phone numbers (including Spanish numbers) and incoming SMS
- Data
- Phone numbers, SMS, call metadata; holder verification documents where the carrier requires them
- Location
- United States / EU
- Safeguard
- Standard contractual clauses
Retell AI, Inc. (with ElevenLabs for speech synthesis)
- Purpose
- Voice agent: calls with the assistant and the receptionist
- Data
- Call audio, transcripts, phone numbers
- Location
- United States
- Safeguard
- Standard contractual clauses / EU-US Data Privacy Framework
Anthropic, PBC
- Purpose
- Language models (Claude) that interpret your requests, draft replies and automatically screen messages for unlawful or dangerous use
- Data
- The parts of messages, emails, events and contacts needed for each request
- Location
- United States
- Safeguard
- Standard contractual clauses. Data is not used to train models
Nylas, Inc.
- Purpose
- Connection to Google and Microsoft calendars
- Data
- Calendar events, account identifiers, access tokens
- Location
- EU (European region)
- Safeguard
- Within the EEA
Google LLC
- Purpose
- Google account you connect: Gmail, Calendar, Contacts, Drive, Meet
- Data
- The data in your own Google account that you authorise access to
- Location
- Global
- Safeguard
- Standard contractual clauses / EU-US Data Privacy Framework
Microsoft Corporation
- Purpose
- Microsoft account you connect: Outlook, Calendar, Teams
- Data
- The data in your own Microsoft account that you authorise access to
- Location
- Global
- Safeguard
- Standard contractual clauses / EU-US Data Privacy Framework
Revolut Ltd / Revolut Business
- Purpose
- Payment processing and recurring payments
- Data
- Payment data (handled by Revolut; Albion does not store card numbers), amounts, payment status
- Location
- United Kingdom / EU
- Safeguard
- EU-UK adequacy decision / within the EEA
Resend, Inc.
- Purpose
- Sending service emails (verification codes, notices, invoices, acknowledgements)
- Data
- Email address, name and email content
- Location
- United States
- Safeguard
- Standard contractual clauses / EU-US Data Privacy Framework
Xero Limited
- Purpose
- Albion's accounting and invoicing
- Data
- Customer billing details (name, address, tax/VAT number, amounts)
- Location
- United Kingdom / New Zealand / EU
- Safeguard
- Adequacy decision
Google and Microsoft act as providers of the accounts you connect yourself; their terms and your relationship with them remain separate. The payment (Revolut) and accounting (Xero) services process billing data as independent controllers to the extent the law requires of them.