Legal # Sub-processors The third parties that process data on our behalf when your organisation uses CubeMSP, what each one does, and where. - Updated 24/09/2026 - 3 min read - For customers ## The short version - A short, named list Every provider is named, with the one job it does and the data it touches. No catch-all categories. - UK first Hosting, storage and email stay in the UK. Only AI processing happens elsewhere, under UK transfer safeguards. - 30 days’ notice Customers are told by email before a sub-processor is added or replaced, and can object before it takes effect. - Your integrations are yours Services you connect, such as Microsoft 365 or your RMM, are your own suppliers rather than ours. A summary for convenience. The full text below is what applies. ## 1. Current sub-processors A sub-processor is a third party that processes personal data on our behalf while we provide CubeMSP to you. Each one below works under a written contract that imposes data protection obligations equivalent to those in our [data processing](/legal/data-processing) agreement with you, and we remain responsible to you for their work. - ### Crushed Ice Group company, part of Crushed Ice Group United Kingdom Operates the UK data centres CubeMSP runs in: application servers, databases, queues and backups, and the infrastructure support behind them. - **Data processed:** All workspace data. - **Transfer safeguard:** None needed. Data stays in the UK. - ### Amazon Web Services Amazon Web Services EMEA SARL United Kingdom (London region) Stores uploaded files and email attachments (Amazon S3) and delivers system email such as invitations, notifications and password resets (Amazon SES). - **Data processed:** Files and attachments; recipient email addresses and message content. - **Transfer safeguard:** None needed. Stored and processed in the UK region. - ### Anthropic Anthropic, PBC United States Generates text for AI features: categorisation suggestions, similar-incident summaries, knowledgebase and review drafts, inbound email triage, Microsoft 365 policy assessment and the CubeAI assistant. - **Data processed:** The content a feature is working on, such as ticket text, knowledge articles, policy settings and figures already calculated from your data. - **Transfer safeguard:** International Data Transfer Addendum, or the UK-US data bridge where the provider is certified. Never used to train models. - ### Voyage AI Embeddings provider United States Converts ticket and knowledge text into embeddings, which power similar-incident retrieval and knowledge search. - **Data processed:** Ticket titles, descriptions, categories and resolutions, and knowledge article text. - **Transfer safeguard:** International Data Transfer Addendum, or the UK-US data bridge where the provider is certified. Never used to train models. ## 2. Services you connect These are not sub-processors. When you connect one, data passes between it and your workspace at your direction, and you have your own agreement with that provider. | Service | What the connection is used for | | --- | --- | | Microsoft 365 | Single sign-on, user and licence sync, Intune and conditional access review, and mailbox reading. | | NinjaOne | Device inventory, health and logged-on user data. | | UniFi | Network sites and devices, read only. | | Pax8 | Subscriptions and licence reconciliation. | | ICUK | Broadband and connectivity services. | | Your own mailboxes | Inbound email for triage, read only, over IMAP or Microsoft 365. | The full list, with what each integration does, is on our [integrations](/integrations) page. ## 3. Changes and objections Before we add or replace a sub-processor, we email the nominated contact at every customer at least 30 days in advance, and update this page and its change log. The notice says who the provider is, what it will do, and where. If you object on reasonable data protection grounds, tell us within that period at [hello@cubemsp.co.uk](mailto:hello@cubemsp.co.uk). We will work with you to find a solution and, if we cannot, you may terminate the affected part of the service without penalty. Anyone who is not a customer but would like to hear about changes can ask to be added to the notification list. ## 4. Change log | Date | Change | | --- | --- | | 24/09/2026 | List first published. | Contact ## Questions about this document Email us and a person will reply. For anything about data held in an MSP’s workspace, please contact that MSP first, as it decides how the data is used. [Email us](mailto:hello@cubemsp.co.uk) - **Company:** Cube Systems Limited, trading as CubeMSP - **Company number:** [17220899](https://find-and-update.company-information.service.gov.uk/company/17220899), registered in England and Wales - **Registered office:** Unit 11, Olney Business Park, Osier Way, Olney, Buckinghamshire, MK46 5FP - **Email:** [hello@cubemsp.co.uk](mailto:hello@cubemsp.co.uk) - **Telephone:** [01234 672 617](tel:+441234672617) - **ICO registration:** [ZC216972](https://ico.org.uk/ESDWebPages/Entry/ZC216972) --- **URL:** https://cubemsp.co.uk/legal/sub-processors