Third parties that help us run AICre8 and the Grow suite
To deliver AICre8 and the Grow suite, we rely on the trusted third-party providers below (our "sub-processors"). Each processes personal data only on our instructions and under a data processing agreement. Several are located outside the UK; where personal data is transferred internationally, we rely on the UK International Data Transfer Agreement (IDTA) or equivalent safeguards. We keep this list current and will give notice of material changes.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication and file storage | All account, CRM, lead, booking and call-log data | European Union |
| Cloudflare | Platform hosting, CDN, edge workers and custom-domain routing | All traffic, IP addresses, data in transit and cached content | Global (incl. USA) |
| Netlify | Hosting for the websites AICre8 builds for customers | Website visitor and contact-form data | USA |
| Anthropic (Claude) | AI generation — website building, Grow content, chat and reports | Prompts and content, which may contain personal data | USA |
| OpenAI | Selected AI features | Prompts and content | USA |
| xAI (Grok) | AI voice concierge and assistant features | Voice and text input | USA |
| Vapi | AI voice phone agents (Grow) | Call audio, phone numbers and transcripts | USA |
| E2B | Secure sandboxes used to build and preview sites | Project files and generated content | USA |
| Sign-in (OAuth), Calendar bookings, Search Console and AI | Account email/name, booking and search-performance data | Global (incl. USA) | |
| Higgsfield | AI image and video generation | Media prompts and generated assets | USA |
| Resend | Transactional and notification email delivery | Email addresses and message content | USA |
| Stripe | Payment and billing processing | Billing details and payment metadata | Global (incl. USA) |
If you have questions about our sub-processors, or you object to a new one, contact us at [email protected].
Last updated: 6 July 2026