Sub-processors

A sub-processor is a third party that processes personal data on our behalf while we provide CubeMSP to you. Each one below works under a written contract that imposes data protection obligations equivalent to those in our data processing agreement with you, and we remain responsible to you for their work.

• Crushed Ice

  Group company, part of Crushed Ice Group

  United Kingdom

  Operates the UK data centres CubeMSP runs in: application servers, databases, queues and backups, and the infrastructure support behind them.

  Data processed

  All workspace data.

  Transfer safeguard

  None needed. Data stays in the UK.

• Amazon Web Services

  Amazon Web Services EMEA SARL

  United Kingdom (London region)

  Stores uploaded files and email attachments (Amazon S3) and delivers system email such as invitations, notifications and password resets (Amazon SES).

  Data processed

  Files and attachments; recipient email addresses and message content.

  Transfer safeguard

  None needed. Stored and processed in the UK region.

• Anthropic

  Anthropic, PBC

  United States

  Generates text for AI features: categorisation suggestions, similar-incident summaries, knowledgebase and review drafts, inbound email triage, Microsoft 365 policy assessment and the CubeAI assistant.

  Data processed

  The content a feature is working on, such as ticket text, knowledge articles, policy settings and figures already calculated from your data.

  Transfer safeguard

  International Data Transfer Addendum, or the UK-US data bridge where the provider is certified. Never used to train models.

• Voyage AI

  Embeddings provider

  United States

  Converts ticket and knowledge text into embeddings, which power similar-incident retrieval and knowledge search.

  Data processed

  Ticket titles, descriptions, categories and resolutions, and knowledge article text.

  Transfer safeguard

  International Data Transfer Addendum, or the UK-US data bridge where the provider is certified. Never used to train models.

These are not sub-processors. When you connect one, data passes between it and your workspace at your direction, and you have your own agreement with that provider.

The full list, with what each integration does, is on our integrations page.

Before we add or replace a sub-processor, we email the nominated contact at every customer at least 30 days in advance, and update this page and its change log. The notice says who the provider is, what it will do, and where.

If you object on reasonable data protection grounds, tell us within that period at hello@cubemsp.co.uk. We will work with you to find a solution and, if we cannot, you may terminate the affected part of the service without penalty. Anyone who is not a customer but would like to hear about changes can ask to be added to the notification list.