ReplySharp: Sub-processors
Last updated: 20 October 2026
When we handle enquiry data for our clients, we act as their processor under a data processing agreement (DPA). These are the service providers (sub-processors) we use to do that. We give clients 30 days' notice before adding or replacing a sub-processor, and clients can object.
Sub-processors for client enquiry data
| Provider | Purpose | Data | Location and safeguards |
|---|---|---|---|
| Cloudflare, Inc. | DNS, email routing for client intake addresses, temporary storage of incoming enquiry emails | Enquiry emails | Global network. Cloudflare Customer DPA with EU Standard Contractual Clauses and the UK Addendum. Certified under the EU-US Data Privacy Framework. |
| Microsoft Ireland Operations Ltd (Microsoft 365) | Business mailbox: intake copy, sending approved replies where agreed, client communication | Enquiry emails and replies | EU (EU Data Boundary). Microsoft Products and Services DPA. |
| AI model providers (API / business terms) | Drafting replies, scoring and summaries | Enquiry text and job details, kept to the minimum needed | Provider DPA with no training on our data. The current providers are named in each client's DPA. |
| postcodes.io (Ideal Postcodes Ltd, UK) | Postcode validation and distance checks | Postcode only | UK. No account or other personal data. |
Only if a client asks for it, in writing: an SMS provider for missed-call text-back. We'll name it and give notice before it's used.
Not our sub-processors: the client's own mailbox, phone system, booking tool, CRM and lead portals, which the client controls.
Providers for our own business data
| Provider | Purpose |
|---|---|
| Microsoft 365 | Our email with clients and prospects |
| Cloudflare | Website hosting and DNS. The website uses no cookies or analytics. |
| Brevo (Sendinblue SAS, France) | Only for emails to people who opted in on our website |
| Accountant (Greece) | Book-keeping and tax filings |
Questions: hello@replysharp.com (subject "Privacy").