Sub-processors
Last updated: 13 October 2026
Overview
Finxone Limited ("FINx1") engages selected third-party service providers ("Sub-processors") to support the delivery, operation, security and maintenance of its products and services.
Where FINx1 processes personal data on behalf of its customers, these Sub-processors may process personal data as necessary to provide their respective services.
FINx1 is committed to protecting personal data and ensuring that Sub-processors are subject to appropriate contractual, technical and organisational safeguards in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR).
List of Sub-processors
The following third-party providers support FINx1's platform and associated services. Their use may vary depending on the products, integrations and functionality enabled for each customer.
| Sub-processor | Purpose of processing |
|---|---|
| Microsoft Azure | Cloud infrastructure, application hosting, databases, object storage, container registry, secrets management and associated platform services. |
| Cloudflare | DNS, content delivery, reverse proxy, web application firewall, DDoS protection and bot detection through Cloudflare Turnstile. |
| Grafana Labs (Grafana Cloud) | Application logging, monitoring, tracing and observability of platform services. |
| Novu | Notification orchestration, delivery workflows and in-app notification management. |
| Twilio | SMS messaging, authentication and one-time password (OTP) delivery. |
| Twilio SendGrid | Transactional email delivery, including account communications, notifications and verification messages. |
| Google (Firebase Cloud Messaging) | Push notification delivery to Android devices and other supported platforms. |
| Apple (Apple Push Notification service) | Push notification delivery to iOS devices. |
| Ideal Postcodes | UK postal address lookup, validation and address data processing. |
Data Protection and Security
FINx1 maintains appropriate contractual arrangements with its Sub-processors where required under applicable data protection legislation.
FINx1 takes reasonable steps to assess the data protection and security practices of its Sub-processors and to ensure that personal data is processed only for authorised purposes, subject to applicable legal and contractual requirements.
Where personal data is transferred internationally, FINx1 will ensure that appropriate transfer mechanisms and safeguards are implemented in accordance with applicable data protection legislation.
Changes to Sub-processors
FINx1 may update this list from time to time to reflect changes in its service providers, platform infrastructure or service offerings.
Where required by the applicable Data Processing Agreement, FINx1 will notify affected customers of intended additions or replacements of Sub-processors and provide an opportunity to object in accordance with the terms of that agreement.
The latest version of this list will be maintained on this page. This page should be read alongside the applicable agreement between FINx1 and its customers, including any Data Processing Agreement.