Legal · transparency
Subprocessors
We process personal data with help from a small set of trusted vendors. The categories of those vendors and the purposes they serve are listed below. The canonical named list under UK GDPR / EU GDPR Article 28 is maintained as part of our records and provided to data-controller customers on request.
Last reviewed 2026-05-14. Controller: Future Assistants Ltd (company no. 17123132), registered in England & Wales — registered office: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London W1T 6EB.
| Category | Purpose | Region |
|---|---|---|
| Hosting & database | Application hosting, primary database, file storage, per-account access controls | EU (UK / Ireland) primary |
| Workflow automation | Background jobs, scheduled tasks, integrations, audit-log ingestion | EU primary |
| AI inference providers | Large-language-model inference for assistant turns, embeddings, content generation | EU / US (under UK ICO Standard Contractual Clauses + UK Addendum) |
| Voice & speech | Text-to-speech narration, optional speech-to-text dictation | EU / US (under SCCs) |
| Outbound email | Transactional emails (sign-in, billing receipts, account notices, password reset) | EU |
| Inbound email | Receiving replies to platform emails (support@, hello@, etc.) | EU |
| Payments | Card processing, subscription billing, creator payouts, tax handling, fraud screening | EU / US (PCI-DSS Level 1, SCCs in place) |
| Object & creative storage | User-generated content storage (avatars, exported assets, content-factory outputs) | EU primary |
| Voice & telephony | Optional inbound/outbound phone numbers, SMS, voice calls | Regional (EU + UK numbers; SMS routed via carrier of origin) |
| Observability & error tracking | Crash reports, performance metrics, uptime monitoring (PII-scrubbed at capture) | EU / US (under SCCs) |
Request the named list
Data-controller customers, auditors, and data subjects can request the canonical named subprocessor list — including specific vendor names, DPA status, and links to each vendor's privacy notice — by emailing privacy@futureassistants.co.uk. We respond within 5 working days.
We will also notify you of substantive changes (new categories of subprocessor, new countries of processing) before they take effect. For ongoing notifications, ask to be added to the change-notice list when you email.
Data residency
Primary database and primary file storage are hosted in the EU (eu-west). Outbound transactional email routes through an EU mail provider. AI inference and some observability services may process data in the US under UK ICO Standard Contractual Clauses with the UK Addendum.
Your rights
Under UK GDPR you can request access to, correction of, or deletion of your personal data, and a copy of the names of subprocessors handling it. Email privacy@futureassistants.co.uk — we respond within 30 days as required by law.
See also: Privacy · Terms · AI training policy