Subprocessors
In effect from 1 October 2026
These are the third parties that can touch personal data in the course of running KAAM. Each is under a data processing contract, each gets only what its purpose needs, and each appears here before it ever handles anything. Material changes are announced by email 30 days in advance.
Draft. The registered company details and ICO registration on these pages are still to be filled in, and the set should be read by a solicitor before launch.
| Service | What it does | What it sees | Where |
|---|---|---|---|
| Supabase (on AWS) | The database, sign-in, and private file storage - the platform itself | Everything in KAAM | [to confirm] |
| Vercel | Hosting and delivery of the site | Everything, in transit; request logs | Global edge; functions in the EU |
| Stripe | Taking subscription payments by card | Billing contact and subscription records. Card details are entered on Stripe's own pages and never reach KAAM | EU/US, under standard contractual clauses |
| GoCardless | Taking subscription payments by Direct Debit | Billing contact and mandate reference. Bank details are entered on GoCardless's own pages and never reach KAAM | UK |
| Resend | Sending the emails KAAM has to send - a response arrived, a visit is tomorrow, a certificate is expiring | Recipient address and the content of the message | EU/US, under standard contractual clauses |
| Anthropic | The AI that helps turn what you type into a clear job description, suggests a service, and answers support questions | The text sent for that purpose. Not used to train any model; we keep the cost of each call, never its content | US, under standard contractual clauses |
| Sentry | Telling us when a page breaks, so it gets fixed | Technical error details. Configured not to collect personal data; addresses are stripped of their query string | EU |
| Companies House | Confirming a company number against the public register during verification | The company number we look up - public data only | UK |
| postcodes.io | Turning a postcode into an area, so jobs can be matched without publishing an address | The postcode only | UK |
Who is not on this list
No advertising network, no data broker, no analytics company. KAAM does not sell or share personal data for anyone else’s purposes, and there is no row here that exists to make money from what we know about you.
Objecting to one
If we add a subprocessor and you have a reasonable data-protection objection to it, tell us at privacy@kaam.uk before it takes effect and we will answer properly. The wider picture is in the privacy notice.