Last revised: 15 May 2026 (added Microsoft Clarity as analytics sub-processor for www.efficientether.co.uk, loaded only after cookie consent).
1. How to Read This List
EfficientEther Ltd engages the organisations below to support platform delivery, customer communications, and website operation. Each sub-processor is contractually bound to confidentiality, security, and use-limitation terms consistent with the EfficientEther Data Processing Agreement.
We notify customers of material changes to this list at least 30 days in advance via the email address on record, unless a shorter period is required to address a risk to personal data.
2. Platform Sub-processors
| Provider | Purpose | Data Categories | Location | Website |
|---|---|---|---|---|
| Microsoft Azure (includes Azure AI Foundry / Azure OpenAI Service) | Cloud infrastructure, data storage, and application hosting for the EfficientEther platform. Hosts all platform data. Azure AI Foundry and Azure OpenAI Service are deployed inside EfficientEther's own Azure subscription and region, so data processed by AI features (for example EtherAssist prompts and responses) remains inside the same Azure tenancy and is covered by the Microsoft Azure DPA. No separate OpenAI (openai.com) relationship exists. | User email addresses, user names, Azure AD groups, Azure AD users, Intune device data, IP addresses used to access the service, customer configuration, telemetry, service logs, and AI prompt / response content processed by Azure-hosted models. | Europe (Germany) or United States — region selected by the customer. | azure.microsoft.com |
| Microsoft 365 | Manages customer interactions and data, supports business analytics, and facilitates office productivity tools used to operate the business and support customers. | Customer information, emails, invoices, analytics data, document storage, and communication records. | Europe, United Kingdom, and United States regions. | microsoft.com/microsoft-365 |
| Supabase | Managed Postgres, authentication, and backend services used by platform components. | User identifiers, authentication metadata, and platform application data stored in the managed database. | Europe | supabase.com |
| Stripe | Processes all customer payments and handles financial transactions securely. | Customer payment processing details including credit card information, billing addresses, billing emails, transaction history, and invoicing details. | Europe | stripe.com |
| Resend | Transactional email delivery (form confirmations, account notifications). | Recipient email address, sender context, and message content. | United States (EU-US Data Privacy Framework). | resend.com |
3. Distribution Partners and Marketplaces
Where customers buy the platform through a marketplace or a distribution partner, that partner typically acts as a separate data controller (or joint controller) for the transactional layer, rather than as a processor operating on EfficientEther's instructions. They are listed here for transparency.
| Provider | Role | Data Categories | Location | Website |
|---|---|---|---|---|
| Microsoft Commercial Marketplace | Customers may purchase and activate the EfficientEther platform through Microsoft Commercial Marketplace (Azure Marketplace and AppSource). Microsoft acts as a separate data controller for the transactional layer (invoicing, tax, entitlement, marketplace account); EfficientEther remains the processor for customer data inside the platform. | Purchase and subscription metadata, billing identifiers, entitlement and activation data, and any lead contact details the buyer chooses to share through the Marketplace contact-me or lead-sharing flow. | Europe, United Kingdom, and United States regions. | appsource.microsoft.com |
4. Marketing and Analytics
| Provider | Purpose | Data Categories | Location | Website |
|---|---|---|---|---|
| HubSpot | Manages customer relationships, marketing campaigns, and lead tracking to enhance customer engagement. | Leads, email addresses, phone numbers, company names, marketing preferences, interaction histories, and (where integrated) social media profiles. | Europe | hubspot.com |
| Mailchimp (Intuit) | Delivers outbound marketing email, newsletter campaigns, and segmented list sends (email shots) to opted-in recipients. | Subscriber name, work email, company, marketing-opt-in status, list / segment tags, and campaign engagement metrics (opens, clicks). | United States (EU-US Data Privacy Framework). | mailchimp.com |
| Google Analytics | Aggregated website usage analytics, loaded only after cookie consent. | IP-derived location, device metadata, and pseudonymous client ID. | United States (EU-US Data Privacy Framework). | marketingplatform.google.com |
| Microsoft Clarity | Anonymised session analytics and aggregate heatmaps on EfficientEther public web properties (including www.efficientether.co.uk). Loaded only after the visitor accepts cookies. Covered by the Microsoft DPA; called out separately here because Clarity is operated as a distinct Microsoft service from the broader Azure / Microsoft 365 processing. | Truncated IP address, user agent, page interactions, and anonymised session interaction recordings. Form contents are not recorded. | United States and European Union regions (Microsoft Clarity data centres). | clarity.microsoft.com |
| Social presence and public updates. Embedded tracking pixels are not loaded on the public website. | None processed by EfficientEther outside linked third-party pages. | Global | linkedin.com/company/efficientether |
5. Questions or Notifications
For questions about any sub-processor or to subscribe to change notifications, email privacy@efficientether.co.uk or open a security enquiry via efficientether.co.uk/contact.