Sub-processors
Last updated: 26 September 2026
Contents
- 1. About this list
- 2. Sub-processors
- 3. Other recipients
- 4. Transfers outside the UK
- 5. Changes to this list
- 6. Contact us
1. About this list
ProConvey Limited (company number 13905278) uses the suppliers below to provide the ProConvey platform. When a law firm or other customer puts personal data into the platform, the customer is the controller, ProConvey is its processor, and the suppliers in section 2 are ProConvey's sub-processors.
This list matches Annex 1 to Schedule 3 (Data Processing Agreement) of our standard licence agreement, with the additions noted. Our Privacy Policy explains how we use personal data where we are the controller.
2. Sub-processors
| Supplier | What they do | Processing location | Transfer safeguard |
|---|---|---|---|
| Amazon Web Services | Case database, database backups and transactional email | United Kingdom — London | Not applicable |
| Vercel | Application hosting | United Kingdom — London | Not applicable |
| Vercel (Blob) | Client document storage | To be confirmed | To be confirmed |
| Cloudflare | Website security and traffic delivery | Global (United States and Europe) | UK Addendum; DPF |
| Clerk | Sign-in and user accounts | United States | UK Addendum; DPF |
| Sentry | Error monitoring | United States | UK Addendum; DPF |
| Better Stack | Logs, uptime monitoring and status page | Germany (EEA) | UK adequacy regulations |
| Nylas | Email integration and mailbox synchronisation | European Union (EEA) | UK adequacy regulations |
| Knock | Email, SMS and in-app notifications | United States | UK Addendum |
| Telnyx | SMS message delivery | United States | UK Addendum; DPF (UK Extension) |
| Cloudlayer | PDF generation | United States | UK Addendum |
| TipTap | Document editing and Word import | European Union (EEA) | UK adequacy regulations |
| Yoti | Digital identity verification, including biometric facial matching | United Kingdom | Not applicable |
| Thirdfort | Identity, AML and source of funds checks | United Kingdom | Not applicable |
| Armalytix | Identity and source of funds checks | United Kingdom and EEA | UK adequacy regulations |
| Title Guardian | Identity verification | United Kingdom | Not applicable |
| OneSearch | Conveyancing searches | United Kingdom | Not applicable |
| The Search Bureau (Elan) | Conveyancing searches | Ireland (EEA) | UK adequacy regulations |
| Ideal Postcodes | Address lookup | United Kingdom and EEA | UK adequacy regulations |
| Tytl (formerly Addland) | Property data | United Kingdom | Not applicable |
| Mapbox | Maps | To be confirmed | To be confirmed |
| LMS (NPTN) | Panel conveyancing quotes and instructions, and sharing of transaction information through the National Property Transaction Network, when a customer uses the LMS integration | United Kingdom | Not applicable |
Identity, AML, source of funds, search and property data providers, and LMS, receive a firm's data only when the firm chooses to use them.
3. Other recipients
These organisations receive data as controllers in their own right, at the customer's direction or for our billing. They are not sub-processors, and some receive no personal data.
| Recipient | Purpose | Location |
|---|---|---|
| HM Land Registry | Official title and document orders | United Kingdom |
| Ordnance Survey | Maps | United Kingdom |
| Ofcom | Broadband and mobile coverage lookup | United Kingdom |
| Just Move In | Home-move notifications | United Kingdom |
| Stripe | Card payments and billing | United States |
Electronic signatures are generated within the ProConvey platform and are not provided by a sub-processor.
4. Transfers outside the UK
The conveyancing case database, its backups and transactional email are hosted in the United Kingdom (AWS London, eu-west-2). Application compute runs in London (Vercel lhr1). Better Stack log and uptime telemetry is processed in the EU (Germany). Clerk (identity: names, email addresses, phone numbers, credentials and sessions), Knock (notification recipient details and content) and Sentry (error and session data) process personal data in the United States under UK transfer safeguards (the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses and, where the supplier is certified, the UK–US data bridge). Clerk and Knock offer no EU region. The storage region of Vercel Blob, which holds client documents, is to be confirmed. Other suppliers that receive personal data, and their locations, are listed in the sub-processor register.
In the tables above, "UK Addendum" means the UK Addendum to the EU Standard Contractual Clauses in the supplier's data processing terms. "DPF" means the supplier's certification to the EU–US Data Privacy Framework and its UK Extension (the UK–US data bridge). "UK adequacy regulations" means the UK's adequacy regulations for the European Economic Area.
5. Changes to this list
We update this page when we add or replace a sub-processor. Customers with a licence agreement receive written notice before a change, as their agreement provides (at least 30 days under our standard terms), and may object on reasonable data protection grounds. Organisations without a licence agreement receive notice as our Data Processing Terms provide.
6. Contact us
Questions about this list: Data Protection Officer: Christopher Scantlebury, chris.scantlebury@proconvey.co.uk
ProConvey Limited is registered in England and Wales, company number 13905278, registered office 45 Fitzroy Street, London, England, W1T 6EB.
