About this document
This Sub-processor List applies to CLASI LTD, a private company limited by shares incorporated in England and Wales (Company No. [CO_NUMBER]) with registered office at 20 Wenlock Road, London, England, N1 7GU ("CLASI", "we", "us"). Questions about this document can be directed to privacy@clasi.co.uk. We review this document at least annually and on any material change to our services or applicable law.
Current sub-processors
The following sub-processors may process Client Personal Data in connection with our services. We update this list as our supply chain changes and notify clients of additions in line with the DPA.
- Lovable Cloud (managed Supabase) — application database, authentication, storage and edge runtime; UK / EU regions where available.
- Cloudflare, Inc. — content delivery, DNS and edge runtime.
- Resend, Inc. — transactional email delivery.
- Google LLC (Gemini AI Gateway) — large language model inference for opt-in AI features.
- OpenAI, LLC — large language model inference for opt-in AI features.
- Shopify International Limited — commerce platform integrations where the Client uses Shopify.
- Stripe Payments UK, Limited — payment processing where the Client uses Stripe.
- GitHub, Inc. — source code management and CI.
- Sentry, Inc. — error and performance monitoring.
How we vet sub-processors
Each sub-processor is engaged under a written contract meeting UK GDPR Article 28 requirements, and is reviewed for security posture, data protection commitments, sub-processing arrangements, and transfer mechanisms. Any change is communicated to clients with at least 14 days' notice.
Updates
We may update this document from time to time. The "last updated" date at the top reflects the most recent change. For material changes that affect your rights, we will provide reasonable notice through our website or, where appropriate, by email.
Contact
CLASI LTD 20 Wenlock Road, London, England, N1 7GU United Kingdom Email: privacy@clasi.co.uk General: hello@clasi.co.uk