Version 1.5
Sub-processor List
Last updated: September 2026 | Ferrison | info@ferrison.com
This page lists the third-party sub-processors that Ferrison engages to deliver its services. Each sub-processor is bound by a data processing agreement that requires them to protect personal data in accordance with applicable law.
We will update this list before engaging any new sub-processor that processes personal data. If you have questions or objections, please contact us at info@ferrison.com.
Platform & Infrastructure
| Processor | Purpose | Location | Transfer safeguard |
|---|
| Replit, Inc. | Hosting and deployment of the Ferrison application and API (app.ferrison.com) | United States | UK SCCs / IDTA |
| Neon, Inc. | Serverless PostgreSQL database hosting, stores the Ferrison application database | United States | UK SCCs / IDTA |
| Cloudflare, Inc. | Hosting, CDN, and DNS for the Ferrison marketing site and Trust Centre (ferrison.com) | United States | UK SCCs / IDTA |
Telephony, Messaging & AI
| Processor | Purpose | Location | Transfer safeguard |
|---|
| Twilio, Inc. | Telephony and messaging infrastructure, call routing, phone number provisioning, media streaming, and SMS | United States | UK SCCs / IDTA |
| Meta Platforms, Inc. | Facebook Messenger and Instagram message channel, delivery and receipt of direct messages handled by the AI Agent (Meta Graph API) | United States | UK SCCs / IDTA |
| OpenAI, L.L.C. | AI model provider, powers real-time voice and text responses and transcript processing | United States | UK SCCs / IDTA |
Authentication, Onboarding & Integrations
| Processor | Purpose | Location | Transfer safeguard |
|---|
| Google LLC | Single sign-on (Google OAuth) and business lookup during onboarding (Places API) | United States | UK SCCs / IDTA |
| Google LLC | Google Calendar sync, where a Customer connects it: reads busy times on mapped calendars and writes Ferrison bookings to them (Google Calendar API) | United States | UK SCCs / IDTA |
Payments
| Processor | Purpose | Location | Transfer safeguard |
|---|
| Stripe, Inc. | Payment processing for credit purchases and auto-recharge, billing, and payment fraud prevention | United States | UK SCCs / IDTA |
Communications
| Processor | Purpose | Location | Transfer safeguard |
|---|
| Resend, Inc. | Transactional email delivery, account notifications, onboarding, and system alerts | United States | UK SCCs / IDTA |
| Microsoft Corporation | Internal email and business productivity (Microsoft 365) | United States | UK SCCs / IDTA |
Website Analytics & Consent
| Processor | Purpose | Location | Transfer safeguard |
|---|
| Google LLC | Google Analytics and Google Ads measurement and conversion tracking on the Ferrison marketing site (ferrison.com). Tags are set to denied by default under Consent Mode v2 and fire only where the visitor consents. | United States | UK SCCs / IDTA |
| CookieHub ehf. | Consent management platform, presents the cookie banner on ferrison.com and records the visitor's consent choices | Iceland (EEA) | UK adequacy regulations |
Note on transfer safeguards: All transfers to processors in the United States are covered by the UK International Data Transfer Addendum (IDTA) to the EU Standard Contractual Clauses, as approved by the UK Information Commissioner's Office. Where a processor participates in the EU-US Data Privacy Framework, we may rely on that framework as an additional or alternative transfer mechanism. Transfers to processors established in the EEA rely on the UK adequacy regulations and require no additional safeguard.
Questions about this list? Contact us at info@ferrison.com
Ferrison Ltd · Registered in England and Wales · Company No. 17227541