Third Party Index

Snapshot 22332

Document
Subprocessor list
URL
https://harriethq.com/sub-processors/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
17723 bytes
SHA-256 (raw)
4aedcdc695f2b0f4fd07d3fc07f172fb62076a7692de7fef565ede64b65ef1d2
SHA-256 (normalized text)
d4e8ed629d9f92353e01f8d86c89ab5674bae72f87403eb747575aeae6069a0c

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Sub-processors
Version 1.0 · Effective 23 May 2026 · Last updated 23 May 2026
Harriet (JustParent Ltd, company number 14338607) uses the following sub-processors to provide the Harriet platform, website, and related services.
We give customers at least 30 days' notice before adding or replacing a sub-processor (see our DPA). To subscribe to change notifications, email [email protected].
Related documents: DPA · Privacy policy · Terms of use
Platform and infrastructure
Sub-processor	Function	Location	Transfer mechanism
Salesforce (Heroku)	Application hosting and infrastructure	United States / EU regions	UK IDTA / EU SCCs + UK Addendum
Amazon Web Services	Cloud storage (S3), email (SES), and related infrastructure (excluding AI inference; see AI and automation)	EU (Ireland) and other regions as configured	UK IDTA / EU SCCs + UK Addendum; adequacy where applicable
AI and automation
Sub-processor	Function	Location	Transfer mechanism
Amazon Web Services (Bedrock)	LLM API for chat and workflow features via AWS Bedrock, including EU-hosted Anthropic models where configured (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms)	EU (Ireland) / United States	UK IDTA / EU SCCs + UK Addendum; adequacy where applicable
OpenAI	LLM API for chat and workflow features (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms)	United States	UK IDTA / EU SCCs + UK Addendum; DPF where applicable
Anthropic	LLM API for chat and workflow features (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms)	United States	UK IDTA / EU SCCs + UK Addendum; DPF where applicable
Google (Cloud / Gemini)	LLM API and related cloud services (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms)	United States / EU	UK IDTA / EU SCCs + UK Addendum; DPF where applicable
Microsoft	Optional Teams integration, authentication, and mailbox features	United States / EU	UK IDTA / EU SCCs + UK Addendum; DPF where applicable
Communications and support
Sub-processor	Function	Location	Transfer mechanism
Mailgun (Sinch)	Transactional email delivery	EU	UK IDTA / EU SCCs + UK Addendum
Slack Technologies	Optional customer integration and notifications	United States	UK IDTA / EU SCCs + UK Addendum; DPF where applicable
Google	Optional Google Chat integration and notifications	United States / EU	UK IDTA / EU SCCs + UK Addendum; DPF where applicable
Payments and billing
Sub-processor	Function	Location	Transfer mechanism
Stripe	Payment processing and billing	United States / EU	UK IDTA / EU SCCs + UK Addendum; DPF where applicable
Analytics, monitoring, and marketing
Sub-processor	Function	Location	Transfer mechanism
PostHog	Product analytics (consent-gated on website)	EU / United States	UK IDTA / EU SCCs + UK Addendum
Google (Analytics / Tag Manager)	Website analytics and advertising tags	United States	UK IDTA / EU SCCs + UK Addendum; DPF where applicable
Attio	CRM for sales enquiries	United Kingdom / EU / United States	EU SCCs + UK Addendum; adequacy where applicable
Sentry	Error monitoring and application performance	United States / EU	UK IDTA / EU SCCs + UK Addendum
Notes
Customer-enabled integrations (for example Slack, Microsoft Teams, Google Chat, or a specific HRIS) process data only when Customer configures them.
LLM providers are sub-processors: relevant Customer Data is shared with them to deliver AI features. They are contractually required not to use Customer Data for model training. Limited retention may apply for service delivery, abuse prevention, and compliance. See our Privacy policy and DPA.
This list covers sub-processors used to deliver the Services and operate our website. It is updated when we add or replace providers.
Contact
Questions about sub-processors: [email protected]