Sub-processors
Yarro Ltd (“Yarro”, “we”, “us”, “our”) uses a limited number of trusted third-party service providers (“sub-processors”) to support the operation of our platform.
A sub-processor is a company that processes personal data on our behalf in order to help deliver our services.
These providers may process limited personal data strictly for the purpose of operating the Yarro platform, such as hosting infrastructure, delivering messages, or supporting system functionality.
We carefully review all sub-processors and require appropriate security and data protection standards.
Where personal data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with UK GDPR.
Current Sub-processors
Supabase Inc.
Purpose: Database hosting and storage infrastructure
Location: EU data region
Supabase provides the secure database infrastructure used to store application data required for the operation of the Yarro platform.
Vercel Inc.
Purpose: Application hosting and delivery infrastructure
Location: Secure global cloud infrastructure
Vercel hosts and delivers the Yarro web application.
Twilio Inc.
Purpose: Messaging infrastructure
Location: Global infrastructure including the United States
Twilio provides messaging infrastructure used to deliver communications through the platform.
Meta Platforms, Inc.
Purpose: WhatsApp Business messaging services
Location: Global infrastructure including the United States
Meta operates the WhatsApp Business platform used to deliver WhatsApp communications.
OpenAI, L.L.C.
Purpose: AI-assisted message processing
Location: United States
OpenAI services are used to support limited operational tasks such as classifying maintenance issues and assisting with workflow automation.
Data sent to AI services is processed only to deliver the requested functionality. Yarro does not use client data to train shared AI models.
Google LLC
Purpose: Business email and internal productivity tools
Location: Global infrastructure
Google Workspace supports internal communication and operational processes within Yarro.
How We Use Sub-processors
Sub-processors are used only where necessary to support the delivery of our services.
Examples include:
• secure hosting and infrastructure
• database storage
• communications delivery
• operational system support
• limited AI-assisted processing
Each sub-processor processes personal data only for the purpose of providing their services to Yarro and is required to maintain appropriate security and confidentiality safeguards.
International Data Transfers
Some sub-processors operate outside the United Kingdom or the European Economic Area.
Where this occurs, Yarro ensures appropriate safeguards are in place in accordance with UK GDPR. These may include:
• Standard Contractual Clauses (SCCs)
• the UK International Data Transfer Addendum
• other legally recognised transfer mechanisms
Updates to this List
We may update this list from time to time as our infrastructure evolves.
Where required, this page will be updated before a new sub-processor begins processing personal data.
Contact
If you have questions about our sub-processors or data protection practices, please contact:
