General Legal Terms

Setyl Sub-processors

Last updated: 8 July 2026

About this page

Setyl Ltd (Setyl) uses a small number of trusted third-party sub-processors to help deliver, support and secure the Setyl IT asset management platform. Our current sub-processors are set out in the table below. This page is referenced by Annex 2 of our Master Data Processing Agreement (DPA) and is incorporated into that agreement by reference.

A sub-processor is a third party engaged by Setyl that processes personal data contained in Customer Data on our behalf. We remain responsible to our customers for the performance of our sub-processors’ obligations. Before engaging any sub-processor, we carry out due diligence and put in place a written contract containing data protection terms no less protective than those in our DPA.

Our sub-processors

The following third parties process personal data contained in Customer Data on Setyl’s behalf:

Sub-processor	Full legal entity name	Purpose	Location	Transfer mechanism	Categories of personal data processed	Categories of data subjects	Vendor DPA link	Effective date
Amazon AWS	Amazon Web Services EMEA SARL	Cloud hosting, infrastructure, storage, databases	EU & UK	UK adequacy (EU/UK hosting); SCCs in DPA	All platform data: names, work emails, job titles, asset/licence assignments, usage logs	Customers’ employees and platform users	AWS DPA	17-Jun-2020
APIdeck	Apideck BV	Unified APIs for integrations	EU (Belgium)	UK adequacy regulations (EEA)	Names, work emails, employment data synced via HR/IT integrations	Customers’ employees and platform users	Apideck DPA	17-Jun-2020
Cloudflare	Cloudflare, Inc.	CDN, DNS, and DDoS protection	Global (with EU safeguards)	UK Ext. to EU-US DPF; SCCs/UK Addendum in DPA	IP addresses, traffic and security logs, transient proxied content	Website visitors; platform users	Cloudflare DPA	17-Jun-2020
Fireflies	Fireflies.ai Corp.	Meeting transcription and voice intelligence	USA	UK Ext. to EU-US DPF; SCCs/UK Addendum fallback	Meeting recordings, transcripts, participant names/emails	Meeting participants (staff, customers, prospects)	Fireflies DPA	17-Jun-2020
Google Workspace	Google Ireland Limited	Email, file storage, calendar, collaboration	EU	UK adequacy regulations (Ireland/EEA)	Emails, documents, calendars, contact details	Setyl employees; customer contacts	Google DPA	17-Jun-2020
HubSpot	HubSpot Ireland Limited	CRM, marketing automation, customer communications	EU	UK adequacy regulations (Ireland/EEA)	Names, emails, phone, company, communication history	Customer contacts, leads, prospects	HubSpot DPA	17-Jun-2020
Slack	Slack Technologies Limited	Internal communications and collaboration	EU	UK adequacy regulations (EEA); SCCs in DPA	Messages, files, profile names and emails	Setyl employees; guest collaborators	Slack DPA	17-Jun-2020
Mailjet	Mailjet SAS (Sinch AB)	Transactional email sending	EU	UK adequacy regulations (EEA)	Recipient names, email addresses, content, engagement data	Customer users; email recipients	Mailjet DPA	17-Jun-2020
Metabase	Metabase, Inc.	BI dashboard layer	EU	UK adequacy regulations (EEA hosting)	Analytics data incl. user identifiers/emails	Platform users	Metabase Hosting Terms (DPA in hosting terms)	17-Jun-2020

Changes and notifications

We may add or replace sub-processors from time to time as our business and the platform evolve. In accordance with our DPA, we will give affected customers at least 30 days’ notice before a new sub-processor starts processing Customer Data, so that customers have the opportunity to object on legitimate data protection grounds.

To subscribe to changes to our sub-processors, please email us at hello@setyl.com and we will add you to our sub-processor update notifications.

Contact

For any questions about our sub-processors or data protection practices, contact us at hello@setyl.com.