Sub-processors
Last updated: August 19, 2026
This is the single, authoritative list of the third parties MyCustomsInfo® uses to deliver its services. Each sub-processor is bound by a Data Processing Agreement that meets UK GDPR and EU GDPR requirements. Our Privacy Policy, GDPR Privacy Notice and Cookie Policy all refer to this page rather than keeping their own separate lists.
Active sub-processors
Amazon Web Services (AWS)
Cloud hosting and infrastructureThe MyCustomsInfo® platform runs on Amazon Web Services. Client customs data is held there and nowhere else. Hosting regions are set out in our data-residency documentation, available on request.
MongoDB Atlas
Tariff reference dataHolds tariff reference data only. It does not hold client customs declaration data or personal data.
Stripe
Payment processingCard data is processed by Stripe. MyCustomsInfo® does not store card details.
HubSpot
Marketing and CRMProcesses marketing and CRM personal data — contacts, form submissions and newsletter consent records. It does not cover the portal, and it is not a sub-processor of client customs data.
Google Analytics, Microsoft Clarity, LinkedIn Insight Tag
Marketing-site analyticsUsed on the public marketing site only. Confirmed on 17/08/2026 that they do not load on authenticated portal pages.
Microsoft (Microsoft 365, Entra ID)
Email and staff identityMicrosoft 365 is our only email system. It processes staff identity and business email, including correspondence with clients and prospects, so it is a processor of personal data. It is not a sub-processor of client customs declaration data.
Not sub-processors of client customs data
The following are commonly assumed to be sub-processors of client customs data but are not. They are listed here so the position is explicit.
Licensed customs brokers
Not a sub-processorValidation is carried out in-house by employed customs professionals. No client customs data is passed to an external broker for validation.
OpenAI
Not a sub-processorNot on this list. Used with synthetic test data only. This list will be updated on the day that changes.
Regime sources and declaration software providers
Not a sub-processorNot on this list. The client authorises the release and the source sends the data; the source acts on the client’s instruction, not ours.
Microsoft Azure (as infrastructure)
Not usedAzure is not used as platform infrastructure. The platform runs on AWS. This is distinct from Microsoft 365 and Entra ID, listed above.
To request further detail, including our data-residency documentation, contact us and we will provide it under the applicable Data Processing Agreement.