Data Protection
Subprocessors
The following third-party service providers process personal data on behalf of HiveSuite and our customers. This page is updated when subprocessors change.
Last updated: September 2026
Contact: privacy@hivesuite.co.uk
About this page: As described in our Data Processing Agreement, HiveSuite maintains this list of subprocessors. We will update this page before engaging a new subprocessor. If you have questions or objections, contact privacy@hivesuite.co.uk.
Infrastructure and Hosting
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| Hosting provider | Application hosting, database storage, backups | All customer data, account data | Contact privacy@hivesuite.co.uk for details |
| Cloudflare, Inc. (R2 Storage) | Object storage for uploaded files, photos, and documents | Customer-uploaded files, photos, compliance documents, receipts, attachments | Global (Cloudflare infrastructure) |
Payment Processing
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| Stripe, Inc. | Subscription billing and customer payment processing | Account holder names, email addresses, payment card details (handled directly by Stripe), billing amounts, invoice references | USA / EEA (Stripe maintains global infrastructure with EU data residency options) |
Email Delivery
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| SMTP2GO | Transactional and service email delivery (welcome emails, quote notifications, invoice emails, reminders) | Recipient email addresses, sender information, email subject lines, email content | New Zealand / Global (SMTP2GO operates global delivery infrastructure) |
SMS Delivery
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| SMS delivery provider | SMS message delivery, dedicated number provisioning, delivery status reporting | Recipient phone numbers, message content, sender information, delivery metadata | USA / Global |
AI Services
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| AI inference provider | HiveIntel natural-language reporting, HiveAssist quotation assistance, receipt/document extraction, template generation | User queries, business data referenced in queries, quotation text, receipt images, document content, AI-generated outputs | USA / Global |
Real-Time Communication and Push Notifications
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| Real-time messaging provider | Real-time event broadcasting for live updates within the platform (e.g. new messages, job status changes) | Event metadata, channel identifiers, user authentication tokens | EU |
| Push notification provider | Mobile push notifications for the HiveCrew app | Device tokens, notification content (job alerts, message previews) | USA / Global |
Security and Bot Protection
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| Cloudflare, Inc. (Turnstile) | CAPTCHA and bot protection on public forms and login pages | IP address, browser/device information, interaction signals | Global (Cloudflare infrastructure) |
Website Analytics and Advertising
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| Microsoft Clarity | Website analytics, session recordings, heatmaps (marketing website only) | IP address (anonymised), device/browser information, page interactions, click data, scroll behaviour | USA / Global (Microsoft infrastructure) |
| Google (Google Ads / gtag.js) | Advertising conversion tracking and measurement (marketing website only) | IP address, device/browser information, page visit data, conversion events | USA / Global (Google infrastructure) |
Accounting Integrations (Optional, Customer-Initiated)
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| Xero Limited | Accounting data synchronisation (invoices, expenses, contacts) | Customer names, contact details, invoice data, expense data, payment references | New Zealand / Global (Xero infrastructure) |
| Intuit Inc. (QuickBooks Online) | Accounting data synchronisation (invoices, expenses, contacts) | Customer names, contact details, invoice data, expense data, payment references | USA (Intuit infrastructure) |
Xero and QuickBooks integrations are optional and are only activated when a customer chooses to connect their accounting platform. Data is synchronised only for the connected customer's records.
Third-Party Content and Services (Website)
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| Google Fonts | Web font delivery (Inter, Poppins) | IP address, browser/device information (via font CSS requests) | USA / Global (Google CDN) |
| Cloudflare (cdnjs) | Font Awesome icon library delivery | IP address, browser/device information (via CDN requests) | Global (Cloudflare CDN) |
| Trustpilot | Review widget display | IP address, browser/device information (via widget script) | Denmark / Global (Trustpilot infrastructure) |
| Product Hunt | Featured badge image | IP address (via image request) | USA |
Mapping and Navigation (In-App, User-Initiated)
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| Apple Maps / Google Maps / Waze | Directions to job sites (opened on user's device via HiveCrew) | Job site addresses (passed to mapping application on user tap) | Per device mapping app provider |
Mapping is user-initiated. When a crew member taps for directions, the job address is passed to the mapping application installed on their device. HiveSuite does not embed mapping APIs on its own servers for this purpose.