Sub-processors
Carreh for Business uses these companies to process personal data on behalf of our customers. We give workspace Owners at least 30 days' notice by email before adding a new one.
1. Current sub-processors
| Company | What it does | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage and email delivery | All Carreh for Business data | Data stored in the European Union; Cloudflare is a US company |
| Anthropic PBC | AI processing: reading booking emails, receipts and documents, and Carreh AI answers | The content sent to each AI feature | United States |
| GoCardless Ltd | Direct debit payments of Carreh invoices | Billing contact, company bank details, payment status | United Kingdom and European Union |
| Card payment reseller (merchant of record) | Sells card subscriptions, takes card payments and charges VAT or sales tax | Billing contact, company name, address and VAT number, payment status | Named here before card payments open |
2. Before live flight updates start
Live flight updates need a flight data provider. It receives flight numbers and dates, not travellers' names. It will be listed here, with 30 days' notice to Owners, before the feature is switched on.
3. Not sub-processors
Exchange rates come from the European Central Bank and ExchangeRate-API. We only download published rates from them and send them no personal data.