Subprocessor List
This page lists the third-party subprocessors used by Thomas Featherstone trading as Featherstone Safety to deliver Featherstone Safety Hub. It is maintained as part of our Data Processing Schedule and UK GDPR compliance.
Last updated: 27 June 2026 · See also: Data Processing Schedule · Privacy Policy
What is a subprocessor?
A subprocessor is a third-party service provider that Featherstone Safety engages to process Customer Personal Data on behalf of customers, as part of delivering Safety Hub. Customers have given general authorisation for use of these subprocessors by accepting the Data Processing Schedule at signup.
If we add or replace a subprocessor that processes Customer Personal Data, we will give at least 30 days’ notice as set out in the Data Processing Schedule (DPS 12).
Current subprocessors
Hosting and edge infrastructure — serves the Safety Hub web application
Application code and edge-cached responses. UK and EU edge network; primary compute in the region nearest to the user.
UK GDPR adequacy decision (EEA) / Standard Contractual Clauses where applicable
Database (PostgreSQL), authentication and real-time services — stores all customer data and user records
Customer Data including personal data entered into Safety Hub. Hosted on AWS eu-west-1 (Ireland, EU) via Supabase.
EEA region — no international transfer. Data remains within the EEA.
Payment processing — handles subscription billing and card payments
Billing information and payment card data (handled by Stripe; card details not stored by Featherstone Safety). UK and EU operations.
UK GDPR adequacy / SCCs. Stripe is certified PCI DSS Level 1.
Business email — used for customer communications and support
Email content and contact details where included in business correspondence. Microsoft EU datacentres.
UK GDPR adequacy decision (EU) / EU Standard Contractual Clauses
Subprocessor changes
We will give at least 30 days’ prior notice before adding or replacing a subprocessor that processes Customer Personal Data. Notice will be sent to the account holder’s registered email address and published on this page.
Customers who object to a new subprocessor on legitimate data protection grounds may contact us at thomas@featherstonesafetyhub.co.uk within the notice period. If we cannot accommodate the objection, the customer may terminate their subscription without penalty.
Questions
For questions about subprocessors or data processing, contact: thomas@featherstonesafetyhub.co.uk
© 2026 Featherstone Safety. Thomas Featherstone trading as Featherstone Safety.