Debitura

Sub-processors

The third parties Debitura engages to process personal data when we provide the platform: what each one does, which data it handles, where it processes it and how transfers are safeguarded.

This is the current list of sub-processors referred to in Debitura's Data Processing Agreement. You can sign up at the bottom of this page to be notified before we add or replace a sub-processor.

‍

Last updated: 8 October 2026

Provider Purpose Personal data Location Transfer safeguard
Microsoft (Azure)Hosting of the platform, database, document storage and monitoringAll platform data: client users, debtor and claim details, documentsIreland (primary), Netherlands (secondary replication)Hosted in the EU. EU Standard Contractual Clauses for any transfer (Microsoft DPA)
CloudflareNetwork security, content delivery and bot protectionTraffic data: IP addresses, request data in transitGlobal network, USAEU SCCs, UK Addendum, EU-U.S. Data Privacy Framework
Twilio SendGridSending platform emailsRecipient names and email addresses, email contentUSAEU-U.S. Data Privacy Framework, EU SCCs, UK IDTA, Binding Corporate Rules
OpenAIAI features in the platformCase details, debtor contact details, messages and uploaded documentsUSAEU SCCs, UK Addendum
TypeSafe AI (Jev)AI assistant for case messagesMessage text, debtor and creditor contact and address detailsUSAEU SCCs, UK Addendum
IntercomCustomer support chat and help centreClient and partner user contact details, support conversations, limited case detailsUSAEU-U.S. Data Privacy Framework, EU SCCs, UK Addendum
AirtableOperational recordsClient user names, email addresses and company detailsUSAEU SCCs
Google (Workspace)Email and documentsCorrespondence with clients and partners, which may include case detailsUSAEU SCCs
SlackInternal team messaging and system alertsClient user email addresses, feedback text, limited case referencesUSAEU SCCs (Salesforce DPA)
LinearEngineering issue trackingError reports that may contain personal dataUSAEU SCCs, UK Addendum
GitHubCode hosting and engineering workflowsError details that may contain personal dataUSAEU SCCs, UK Addendum, EU-U.S. Data Privacy Framework
StripePayments and billingBilling contacts, addresses, tax and invoice detailsUSAEU SCCs, UK IDTA, EU-U.S. Data Privacy Framework
ZapierWorkflow automation for website enquiriesName, email address and message from website formsUSAEU SCCs, UK Addendum
WebflowWebsite hosting and website formsName, email address and message from website forms, including sign-ups to this listUSAEU SCCs, UK IDTA
NotionInternal workspace, customer records, AI meeting notes and AI search across our email and documentsClient and partner contact details, account notes, meeting notes, and email and document content that may include case detailsUSAEU SCCs, UK Addendum

Collection partners are not on this list. The local agencies and law firms that work on your cases are your own independent processors under their agreement with you, not Debitura's sub-processors.

‍

Accounting tools you connect (for example QuickBooks, Zoho Books or your own Stripe account) are your own connections. Debitura reads invoice data from them on your instruction; they are not Debitura's sub-processors.

Get notified of changes

Leave your email address and we will email you before we add or replace a sub-processor. We use the address only for these notices.

Read our Privacy Policy for how we handle personal data. To object to a change or ask a question, email privacy@debitura.com.

Thank you. We will email you before we add or replace a sub-processor.
Something went wrong. Please try again, or email privacy@debitura.com and we will add you.