FreeAgent subprocessors

Version 1.2: This list of subprocessors was updated November 2024. It may be updated in the future and we'll post the updated version here.

To support delivery of our Service, FreeAgent Central Ltd. ("FreeAgent") may engage and use data processors with access to certain service data (each, a "subprocessor"). This page provides important information about the identity, location and role of each subprocessor. Terms used on this page but not defined have the meaning set forth in our General Privacy Notice, Terms of Service and/or Standard Framework Agreement (the "Agreement"). Defined terms used herein shall have the same meaning as defined in the Agreement.

What is a subprocessor

A subprocessor is a third-party data processor engaged by FreeAgent who has, or potentially will have, access to or process service data (which may contain Personal Data). FreeAgent engages different types of subprocessors to perform various functions as explained in the tables below.

Due diligence

FreeAgent undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed subprocessors that will or may have access to, or process, service data.

Contractual safeguards

FreeAgent requires its subprocessors to satisfy equivalent obligations as those required from FreeAgent (as a Data Processor) as set forth in either FreeAgent's, or the corresponding subprocessor's equivalent, Data Processing Addendum.

This policy does not give users of the Service any additional rights or remedies and should not be construed as a binding agreement. The information here is provided for transparency purposes to illustrate FreeAgent's engagement process for subprocessors as well as to provide the actual list of third-party subprocessors used by FreeAgent (as of the date of this policy) which FreeAgent may use in the delivery and support of its Service.

Process to engage new subprocessors

As our business grows and evolves, the subprocessors we engage may also change. We will provide users of the Service with notice of any new subprocessors to the extent required under the Agreement by posting such updates here.

FreeAgent will provide notice via this policy of updates to the list of subprocessors that are utilised, or which FreeAgent proposes to utilise, to deliver its Service. FreeAgent undertakes to keep this list updated regularly to enable users of the Service to stay informed of the scope of subprocessing associated with the Service.

Please check back frequently for updates.

The following is an up-to-date list (as of the date of this policy) of the names and locations of FreeAgent subprocessors.

Infrastructure subprocessors - service data storage

FreeAgent production systems for the Service are located in secure data centre facilities in Ireland. FreeAgent may use the following subprocessors to host service data or provide other infrastructure that helps with the delivery of the Service.

Infrastructure subprocessors
Entity name Processing activities Country(ies) Adequacy
Amazon Web Services, Inc. Cloud service provider & application security monitoring United States,
United Kingdom,
European Union (Ireland)
ISO 27001
Privacy Notice
GDPR Link
DPA with SCC
Google, Inc. Cloud service provider United States,
European Union
ISO 27001
Privacy Notice
GDPR Link
DPA with SCC
Digital Ocean Application hosting United States,
European Union
SOC II
Privacy Notice
GDPR Compliance
DPA with SCC

Security, error tracking & compliance subprocessors

Security, error tracking and compliance subprocessors
Entity name Processing activities Country(ies) Adequacy
Datadog Application performance management European Union SOC II
Privacy Notice
GDPR Compliance
Crowdstrike Log aggregation and analysis European Union (Germany) Privacy Notice
DPA
Sentry.io Application exception management United States,
European Union (Germany)
Privacy Notice
DPA with SCC
OneTrust Cookie management United States,
United Kingdom,
European Union
ISO 27001 & SOC II
Privacy Notice
DPA with SCC
NatWest Group Regulatory compliance United Kingdom, India Privacy Notice

Customer & practice support subprocessors

Customer and practice support subprocessors
Entity name Processing activities Country(ies) Adequacy
Salesforce Customer management services European Union (Germany) ISO 27001
Privacy Notice
DPA with SCC
ZenDesk Customer support services European Union (Germany) ISO 27001
SOC II & GDPR Compliance
Privacy Notice
8x8 Corporate VoIP United Kingdom,
United States,
Singapore
ISO 27001 & SOC II
Privacy Notice
US DPF
Aircall Corporate VoIP United Kingdom,
United States,
European Union
SOC II
Privacy Notice
DPA
On24 Product webinars United Kingdom,
United States,
European Union
Privacy Notice
GDPR Compliance
SCC
DPA
EasyLMS Practice accreditation European Union (Netherlands) ISO 27001
Privacy Notice
Zapier Data aggregation and transfer United States SOC II
Privacy Notice
DPA
SCC
Oracle NetSuite Financial control United Kingdom ISO 27001 & SOC II
Privacy Notice

User research, service improvement & customer survey subprocessors

User research, service improvement and customer survey subprocessors
Entity name Processing activities Country(ies) Adequacy
Qualtrics Customer satisfaction surveys European Union (Germany) Privacy Notice
Typeform Customer surveys European Union,
United Kingdom,
United States
ISO 27001 & SOC II
Privacy Notice
GDPR Compliance
DPA with SCC
FormAssembly Web form and survey generation United States ISO 27001 & SOC II
Privacy Notice
GDPR Compliance
DPA with SCC
HeyMarvin User research and service improvement United States SOC II
Privacy Notice
DPA with SCC
Consent Kit User research management United Kingdom,
European Union
Security Controls
Maze User research United States Privacy Notice
SOC II
DPA with SCC
Optimal Workshop User research New Zealand,
United States,
European Union
Privacy Notice
DPA with SCC
Tremendous User research reimbursement United States Privacy Notice
DPA with SCC

Data & analytics subprocessors

Data & analytics subprocessors
Entity name Processing activities Country(ies) Adequacy
Looker Business intelligence visualisation European Union (Germany) ISO 27001
Privacy Notice

Product feature subprocessors

Product feature subprocessors
Entity name Processing activities Country(ies) Adequacy
Postmark Email delivery service United States SOC II
Privacy Notice
GDPR Compliance
DPA with SCC
Sensibill Receipt data extraction Canada Privacy Notice
DPA

Payment subprocessors

FreeAgent does not store payment card information or you bank account access details. Payment processing and account access information is handled directly by the following third parties according to their respective privacy policies and terms of service.

Payment subprocessors
Entity name Processing activities Country(ies) Privacy Notice
Stripe Outsourced payment management United States,
European Union
Privacy Notice
Paypal Outsourced payment management United States,
European Union
Privacy Notice
GoCardless Outsourced payment management European Union Privacy Notice