Sub-Processor List

1. What Are Sub-Processors?

A sub-processor is a third-party organisation that BakersGuild Limited (as data processor) engages to carry out specific processing activities involving personal data on behalf of our customers. Under Article 28(2) of UK GDPR, we are required to obtain our customers' authorisation before engaging sub-processors, and to ensure they provide sufficient guarantees about their data protection practices.

This page lists all current sub-processors. If you are a business customer with a Data Processing Agreement, you have already provided general authorisation for the sub-processors listed below. We will notify you of any changes via email.

2. Current Sub-Processors

Provider	Service	Data Processed	Location	Safeguard
Cloudflare, Inc. cloudflare.com	Infrastructure, edge compute, D1 database, KV storage, CDN, DDoS protection	Account data, email metadata, classification results, authentication tokens	EU/UK Edge	Cloudflare DPA; Standard Contractual Clauses (EU SCCs); UK Addendum
Microsoft Corporation microsoft.com	Microsoft Graph API — Outlook email metadata access, folder management, OAuth authentication	Email metadata (sender, subject, IDs), OAuth access tokens, user profile	EU Data Boundary	Microsoft Online Services DPA; EU Data Boundary commitment
Anthropic, PBC anthropic.com	AI classification API (Claude) — processes email metadata to produce category labels. Also powers MO Chat.	Email metadata only (sender address, subject line, timestamp). No email body content is ever sent.	USA	International Data Transfer Agreement (IDTA) approved by UK ICO; Anthropic DPA
Stripe, Inc. stripe.com	Payment processing, subscription management, invoicing	Payment details, billing email, subscription status. Card data is processed directly by Stripe and never passes through our systems.	EU/UK	Stripe Data Processing Agreement; Standard Contractual Clauses
Resend, Inc. resend.com	Transactional email delivery — account notifications, subscription receipts, security alerts	Recipient email address, email content (transactional only — no user email content)	USA	Resend DPA; International Data Transfer Agreement (IDTA)

3. What Data Is NOT Shared with Sub-Processors

The following data is never shared with any sub-processor:

• Email body content: The content of your emails is never sent to any third party, including Anthropic. Our API architecture is designed to make this technically impossible, not merely a policy restriction.
• Full email metadata sets: Sub-processors receive only the minimum data necessary for their specific function. Anthropic, for example, receives only sender and subject metadata — not your full account profile.
• Authentication credentials: Your Microsoft OAuth tokens are stored encrypted by Cloudflare and are never transmitted to Anthropic, Stripe, or Resend.

4. Sub-Processor Due Diligence

Before engaging any sub-processor, BakersGuild Limited conducts due diligence including:

• Review of the provider's data protection and privacy policies
• Verification of appropriate safeguards for international transfers
• Confirmation of compliance certifications (SOC 2, ISO 27001, or equivalent)
• Execution of appropriate contractual protections (DPA, SCC, IDTA)

5. Notification of Changes

BakersGuild Limited will provide at least 30 days' advance notice of any intended addition or replacement of sub-processors. Notice will be given by:

• Email to the registered account email address (for all customers)
• Updated version of this page with a change log
• In-app notification in the Mail-Organiser task pane

Business customers with a DPA have the right to object to a new sub-processor within the 30-day notice period. If you object and we cannot accommodate your objection, you may terminate your account and receive a pro-rata refund.

6. Contact

For questions about sub-processors or data transfers: privacy@mail-organiser.com