Sub-processors
As at 24 September 2026. This is the named list referred to in clause 20 of our Privacy Policy.
These are the third parties that process personal data for PayTrader Ltd, or that receive personal data from us in order to run the service. For each one we show the provider, what it does for us, where the data is hosted, and the role it plays under the UK GDPR.
We keep a fuller internal register covering the data-processing agreement with each provider, the date they were added, and the review cycle. This page is the part of it we publish, and we update it whenever a provider changes.
Current list
| Provider | Service | Hosting region | Role |
|---|---|---|---|
| Trustap Ltd (launch-primary Payment Provider) | Payment processing, merchant-of-record fund holding (escrow), seller KYC via its payment partner's hosted onboarding | Ireland / EEA | Separate controller for regulated records; recipient of transaction data |
| Stripe — Stripe Technology Europe Ltd, an e-money institution authorised by the Central Bank of Ireland (ref. C187865) | Regulated e-money infrastructure under the Trustap rail: fund holding, card processing, hosted identity verification | Ireland / EEA | Separate controller for its regulated processing |
| Ryft Ltd (fallback Payment Provider) | Payment processing, escrow, hosted KYC on the fallback rail | United Kingdom | Separate controller for regulated records (FCA / MLR 2017); processor for transaction data |
| Ryft's identity-verification partner (bundled with Ryft's onboarding) | Identity verification on the fallback rail | UK / EEA | Separate controller for biometric processing (no direct relationship with PayTrader) |
| Railway Corp | Cloud hosting — database, API, background worker, admin portal | Migration to an EU region in progress; not yet verified complete. See the note below. | Processor |
| Cloudinary Ltd | Media storage and delivery for photos of completed work, dispute evidence and chat media | Being confirmed. See the note below. | Processor |
| Resend, Inc. | Transactional email delivery | United States | Processor |
| Expo Inc. | Push notifications to your phone | United States | Processor |
| Anthropic, PBC | Optional AI quote scanning (only when a tradesperson chooses to photograph a paper quote) | United States | Processor |
| GoDaddy.com LLC | Domain registration and email forwarding | United States | Processor |
| Netlify, Inc. | Hosting for this website, and storage of waitlist sign-ups submitted here | United States | Processor |
| Sentry — Functional Software, Inc. | Crash diagnostics for the mobile app. The app contains no analytics or advertising SDK. | United States | Processor |
Two hosting regions we are not yet stating as settled. We would rather say so than publish a region we have not verified.
Railway — our hosting is being pinned to an EU region, and that move is not yet verified complete. Until it is, some processing may take place in a United States region, safeguarded by standard contractual clauses with the UK addendum.
Cloudinary — we are confirming the storage region on our account. Where a United States region applies, the transfer is safeguarded by standard contractual clauses with the UK addendum.
If you need the current position for either before we have updated this page, email privacy@paytrader.net and we will tell you what it is.
Transfers outside the UK
Where a provider above is listed as hosting data in the United States, the transfer is made under UK GDPR Article 46 safeguards — standard contractual clauses with the UK addendum (or the UK extension to the EU–US Data Privacy Framework where the provider is certified). Providers listed in Ireland or the EEA are covered by the UK's adequacy regulations, which need no additional mechanism.
Other recipients
Separately from the providers above, we may disclose personal data to regulators and authorities where the law requires it — for example the Information Commissioner's Office, HMRC, UK law enforcement acting under a court order or statutory request, the Financial Conduct Authority or the alternative dispute resolution scheme named in our Terms of Service, and our insurers or instructed legal advisers in the defence of a claim. These are independent controllers for anything they go on to do with the data.
Questions, or telling us we have it wrong
Email privacy@paytrader.net. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to put it right first.