A sub-processor is a third-party service we use to provide Landlord Pulse, and which may process personal data on our behalf. We pick sub-processors carefully and have a written data-protection agreement with each one. This page lists who they are, what they do, and where they process data.
We give 30 days' advance notice — by in-app banner and email — before adding or replacing a sub-processor.
Hosting and data storage
Google Cloud Platform and Firebase. We use Cloud Firestore, Firebase Auth, Cloud Storage, Cloud Run, Cloud Logging and Secret Manager. Your application data — portfolio, financial data, uploaded documents — is stored in europe-west2 (London) under Google's UK / EU Data Processing Addendum, with AES-256 encryption at rest managed by Google. The one exception is Firebase Auth (the login system): Google does not currently offer a UK/EU region for it, so your account email, hashed password and sign-in metadata are processed in the United States under the Standard Contractual Clauses in Google's data-processing agreement. We minimise the personal data held in Auth and disclose Google (US) as our Auth sub-processor.
AI inference
Google Vertex AI. We use Gemini models running in europe-west2. Used for chat (Zoom Out and Deep Dive), the strategy plan, and light agent tasks. Stays within Google's UK / EU DPA boundary; we have opted out of model training.
Anthropic (Claude). Currently disabled at the router. If we ever enable it we will give 30 days' notice and will only do so once a signed DPA with Anthropic plus a Zero Data Retention addendum is in place. Anthropic processes in the US under a UK International Data Transfer Agreement (IDTA).
Accounting source data
Xero. Used only if you connect it. Xero is the source of your accounting data; we pull invoices, transactions, balances and tracking categories that you authorise. UK-based.
Intuit / QuickBooks Online. Used only if you connect it (an alternative to Xero). QuickBooks Online is the source of your accounting data; we pull invoices, bills, expenses, transactions and balances that you authorise. US-based; the transfer is protected by the UK IDTA / Standard Contractual Clauses.
The Sage Group plc / Sage Accounting. Used only if you connect it (an alternative to Xero or QuickBooks). Sage Accounting is the source of your accounting data; we pull ledger accounts, invoices, credit notes, payments, receipts and journals that you authorise. Sage's processing region for this data is to be confirmed; we will update this entry once Sage has confirmed it.
Push notifications (iOS app)
Google Firebase Cloud Messaging and Apple's Push Notification service (APNs). Used only if you install the iOS app and allow notifications. To send a reminder to your phone we pass a device token — an identifier for your device, not for you — together with the notification's title and text (for example "Gas safety certificate expires in 30 days") to Firebase, which hands it to Apple for delivery. No portfolio figures, tenant names or documents are included in a notification. Both are processed in the United States under the UK International Data Transfer Agreement. You can stop this at any time by turning notifications off, in the app or in iOS Settings; signing out removes the device token from your account.
Payments
Stripe. Used once paid plans launch. Stripe processes payment data in the UK, EU and US under their global DPA and the UK IDTA. We never see your full card number; Stripe holds it and gives us a customer reference.
Transactional email
Email provider — to be selected before trial launch; the current candidate is Resend. EU-region processing. Used for account email (welcome, password reset, payment receipts, trial reminders). Marketing email, if you opt in, is sent through the same provider.
Customer support
Zoho Desk (Zoho Corporation). Handles email sent to our support mailbox and any support request you submit in the app. Zoho processes your name, email address, the message you send and any attachments you choose to include, in Zoho's EU data centre under Zoho's data-processing agreement. Support tickets are kept for 24 months after they are resolved. Do not include passwords or full card numbers in a support message; we will never ask for them.
Error monitoring
Sentry. EU-region processing. Captures unhandled errors and stack traces so we can fix bugs. Configured to scrub personal data from error payloads.
Product analytics
Analytics provider — to be selected before trial launch; the current candidate is PostHog EU Cloud. Used only if you opt in via the cookie banner. Captures event names tied to your tenant identifier; does not capture free text or page screenshots.
International transfers
Where data is processed outside the UK or EEA — Firebase Auth (login data, US), push notification delivery (Firebase Cloud Messaging and Apple APNs, US), Anthropic, Stripe (partially), and any provider routed through a US affiliate — we rely on the UK International Data Transfer Agreement (IDTA) or the Addendum to the EU Standard Contractual Clauses, with supplementary measures including encryption in transit, encryption at rest, and contractual no-government-access commitments where the provider offers them.
Sub-processors we no longer use
None at the time of writing. Removed sub-processors will be listed here for at least 24 months.
Contact
Questions about a sub-processor or to object to a sub-processor change: privacy@landlordpulse.co.uk.