Simple Works LTD uses a small number of third-party subprocessors to help deliver SimpleAMS (https://simpleams.co.uk). This page lists the subprocessors that may process personal data on our behalf and supports the Data Processing Addendum. Subprocessors are bound by written terms no less protective than our DPA.
Current subprocessors
| Subprocessor | Purpose | Processing location | Transfer mechanism |
|---|---|---|---|
| Hosting provider (cPanel infrastructure) | Hosts the application and per-tenant databases | European Union | Within EU / EEA |
| Stripe | Subscription billing and payment processing | EU / United States | SCCs / EU-U.S. Data Privacy Framework |
| Email delivery provider (SMTP) | Sends transactional and account emails | EU / per provider | SCCs where applicable |
| OpenAI or Anthropic (optional) | AI assistant - only if the customer enables it with their own key; prompts go to the provider the customer selects | United States | SCCs / Data Privacy Framework |
| Google (optional) | Workspace directory sync and SSO - only if the customer connects it | EU / United States | SCCs / Data Privacy Framework |
| Jamf, Mosyle (optional) | Device / MDM sync - only the integrations the customer connects | per provider | SCCs where applicable |
| Slack (optional) | Notification delivery - only if the customer connects it | United States | SCCs / Data Privacy Framework |
Optional subprocessors process data only when the customer chooses to enable the related integration or feature.
Changes & notification
We will update this page before adding or replacing a subprocessor that processes personal data. Customers may ask to be notified of changes by emailing privacy@simpleams.co.uk. If a customer objects to a new subprocessor on reasonable data-protection grounds, they may raise it with us at that address.
Contact
privacy@simpleams.co.uk.