Subprocessors

Service Provider Register

This register lists third-party processors referenced in current Strand policy and trust documentation, with processing purpose and data scope.

Providers Listed

6

Disclosure Basis

Privacy policy + trust center

Last Updated

2026-03-04

Amazon Web Services

Core cloud infrastructure and data storage.

Region
United Kingdom (London)
Jurisdiction
United Kingdom
Investigation telemetryApplication dataInfrastructure metadata
Visit provider site

Supabase

Managed PostgreSQL and authentication services.

Region
United Kingdom
Jurisdiction
United Kingdom
User accountsInvestigation metadataAccess-control metadata
Visit provider site

Cloudflare

Traffic delivery and edge security controls.

Region
Global edge with UK-backed data paths for core platform requests.
Jurisdiction
United Kingdom and global processing footprint
Request metadataTraffic security telemetry
Visit provider site

DigitalOcean

Compute resources for backend service operations.

Region
United Kingdom-hosted infrastructure for platform workloads.
Jurisdiction
United Kingdom
Investigation processing workloadsOperational logs
Visit provider site

Stripe

Payment processing and billing workflows.

Region
Global
Jurisdiction
Processor-specific global footprint
Billing contactsSubscription and transaction metadata
Visit provider site

OpenAI

AI processing capabilities used in platform workflows.

Region
Global
Jurisdiction
Processor-specific global footprint
Prompt and response payloads required for enabled AI workflows
Visit provider site