Avagance — Sub-processors
Last updated: 24 August 2026
What this page is
Avagance uses a small number of third-party providers to run the platform and the website. Where one of them processes personal data on our behalf, it is a sub-processor and it is listed here.
Each sub-processor is engaged under a written contract that limits it to acting on our instructions, requires appropriate security, and passes down the obligations in our own Data Processing Agreement.
Our policy is to keep personal data in the United Kingdom or the European Economic Area wherever the provider offers it. Where a provider processes outside the UK, we rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and we carry out a transfer risk assessment.
1. Platform sub-processors
These process personal data that a customer firm puts into the platform. For this data the customer firm is the controller and Avagance is the processor.
| Sub-processor | Purpose | Location | Transfer basis |
|---|---|---|---|
| Google Cloud Platform | Cloud hosting, database, storage | UK / EEA region | Data held in the UK/EEA. UK Addendum to the EU SCCs covers any support access from outside the UK |
| OpenAI | Language-model processing for assistant and drafting features | United States | UK Addendum to the EU SCCs. Under the enterprise/API terms, inputs and outputs are not used to train shared models |
| Modal | Machine-learning compute | United States | UK Addendum to the EU SCCs |
| Deepgram | Speech-to-text for voice and note-taking features | United States | UK Addendum to the EU SCCs |
| Cloudflare | Hosting, network security and bot protection | Global edge network, UK/EEA where configurable | UK Addendum to the EU SCCs |
| Stripe | Subscription billing and payment processing | United States, with EEA processing for UK/EEA customers | UK Addendum to the EU SCCs |
| Resend | Transactional email delivery | United States | UK Addendum to the EU SCCs |
2. Website and business sub-processors
These process personal data for which Avagance is the controller: website visitors, waitlist and enquiry leads, live-chat conversations and partner registrations. They are described in the Website Privacy Notice and the Cookie Notice.
| Sub-processor | Purpose | Location | Transfer basis | Consent needed |
|---|---|---|---|---|
| Cloudflare | Website hosting, security, bot protection (Turnstile) | Global edge network | UK Addendum to the EU SCCs | No, strictly necessary |
| Resend | Delivery of the emails our forms send | United States | UK Addendum to the EU SCCs | No, strictly necessary |
| Google Analytics 4 | Website analytics | United States | UK Addendum to the EU SCCs | Yes |
| Tawk.to | Live chat on the website | United States | UK Addendum to the EU SCCs | Yes, or when you open the chat |
| PromoteKit | Partner and referral attribution | United States | UK Addendum to the EU SCCs | Yes |
| Google (YouTube) | Films embedded on some pages. The still image is served from our own servers; Google receives data only if you press play | United States | UK Addendum to the EU SCCs | Loads only when you press play |
3. Customer-initiated integrations
Connectors you switch on yourself, for example Intelliflo, Voyant or an e-signature provider, are connected at your instruction. Where they process personal data, your own relationship with that provider governs that processing, as set out in Terms of Service section 12. They are not Avagance sub-processors, and we do not list them here.
4. Changes to this list
We give customers prior notice before a new sub-processor starts processing their personal data, by updating this page and, where the change is material, by email. A customer may object on reasonable data-protection grounds within 10 business days, as set out in DPA section 5.4.
To be told when this list changes, or to ask for the transfer mechanism and transfer risk assessment for any provider named here, email policy@avagance.com.