ThriveThrive← Back to home
Privacy noticeTerms of serviceData Processing AgreementSub-processorsCookies

Sub-processors

Last updated: 13 June 2026

The following sub-processors are engaged to deliver the Thrive Data Connect and Engine services. Each is bound by a data-processing addendum incorporating UK GDPR Article 28 obligations. Additions or replacements are notified to customers at least 30 days before they take effect.

Sub-processorPurposeLocation
Amazon Web Services EMEA SARLHosting (compute, storage, KMS, backups)UK (eu-west-2), Ireland backup (eu-west-1)
Supabase (managed PostgreSQL)Database, authentication, edge functionsEU (Frankfurt)
CloudflareDNS, CDN, edge routing for the customer dashboardGlobal (UK/EEA termination)
SentryApplication error monitoringEU
ResendTransactional email (auth, notifications)EU
Stripe Payments Europe LtdSubscription billing and invoicingIreland

To object to a new sub-processor or request the underlying DPA, email dpo@thrive.uk.