Sub-processors
Legatum Group Limited uses third-party providers (sub-processors) to deliver VaultHire and AccountRadar. This page lists the categories of sub-processor we engage. The full named list — including specific provider names — is available to customers and active prospects under a mutual NDA. Contact privacy@legatumgroup.uk to request it.
A "sub-processor" is a third party that processes personal data on our behalf or as part of providing our services to you.
We update this page when our sub-processor categories change. Customers are notified by email at least 30 days before any new sub-processor is added.
Categories of sub-processor
| Category | Region | Notes |
|---|---|---|
| Cloud infrastructure provider | UK / EU | Hosting, CDN, edge compute |
| Database / backend provider (AccountRadar only) | EU | London or Frankfurt regions |
| Payment processor | UK / EU | Card and direct-debit payments |
| Transactional email provider | EU | Account, system, and notification emails |
| AI inference provider | US | Data not retained for training under our enterprise terms |
| Business data providers | US / EU (SCCs in place) | Public business records, contact data, signal aggregation |
| UK government data sources | UK | Public company and director records |
Data residency
All production data storage is pinned to UK or EU regions. Stateless compute (e.g. serving page requests) may execute at the global edge nearest the user, but no production personal data is stored outside the UK/EU.
Where personal data is transferred to non-UK/EU jurisdictions, we rely on Standard Contractual Clauses (SCCs) and the providers' own UK/EU compliance positions.
Full named list
The complete sub-processor list — including all specific provider names and detailed processing purposes — is available to customers and active prospects under a mutual non-disclosure agreement. Contact privacy@legatumgroup.uk to request it.
How we manage sub-processors
- Every sub-processor is bound by a written data processing agreement
- We assess sub-processors before onboarding, and review annually
- We notify customers in writing at least 30 days before adding a new sub-processor
- Customers may object to new sub-processors; if we cannot reach a workable position, you may terminate without penalty for the relevant period
Get notified of changes
To receive email notifications when this list changes, contact privacy@legatumgroup.uk to be added to our notifications list.
Contact
For sub-processor enquiries: privacy@legatumgroup.uk