Subprocessor register
Preview draftA transparent working register of providers visible in the public marketing implementation. It is not yet a complete contract-ready register for customer services.
Owner and legal verification required before publication
This draft leaves material facts and commitments unresolved. It is not an operative notice, policy or agreement, and it does not claim regulatory or accessibility compliance.
- Reconcile all production and customer-service vendors against executed contracts.
- Confirm each vendor's legal entity, role, data categories and processing region.
- Approve transfer mechanisms and an advance change-notification period.
Services seen on the public site
These service names are visible in the public-site source. That does not confirm a signed processor contract, a subprocessor relationship for every service, or an approved customer list. The legal entity, role, information received and location must be checked before this register is treated as complete.
| Service / legal entity | Purpose | Data categories | Hosting / processing region | Transfer mechanism | Change notice |
|---|---|---|---|---|---|
| Google Fonts resources; legal entity and processor role not verified | Provide external font resources used by the public site. | Browser request information; exact fields and role to confirm. | Not verified. | Not verified. | No period approved. |
| Cloudflare Pages service; legal entity and processor role not verified | Deliver the public site and handle a public analytics request. | Request information and optional analytics details may be involved. | Not verified. The UK customer service cell does not establish the location of every site request. | Not verified. | No period approved. |
| Supabase service; legal entity and processor role not verified | Support marketing records and optional analytics records visible in the public implementation. | Contact/demo information and optional page or button measurements; exact scope and retention to verify. | The UK customer service cell is confirmed; whether these public-site records are in that cell is not verified. | Not verified. | No period approved. |
| Public chat model provider; supplier/entity not identified | Generate responses to public chat messages. | Chat prompts and related request context may be involved. | Supplier and region not identified in this preview. | Not verified. | No period approved. |
Current and planned locations
The current FVI customer-processing cell is the United Kingdom. US, EU, India and Singapore cells are planned only; they are not represented as live deployment locations in this register. Each provider's actual storage, edge handling, remote support access and transfer mechanism still needs verification for the selected service.
Customer-service register still required
The list above does not enumerate every provider that may support authenticated services, hosting, monitoring, communication, backup or customer support. The final register must be reconciled against the selected service and deployment, name the legal entity for each provider, and distinguish a subprocessor from an independent controller or infrastructure provider.
No advance-notice interval, objection right or emergency-change exception is promised by this page. Procurement and legal owners must approve a specific change-notification commitment before this register is used for contracting.
Register and privacy enquiries: privacy@falconveritas.com