Sub-processors
Third parties that support our processing of personal data
Last updated:
27 August 2026
Introduction
This page lists the third parties Hybytes Ltd may engage as sub-processors when we process personal data on a Client's behalf under our Data Processing Agreement, together with the purpose for which each is engaged. This list covers our own operational tooling; it does not cover the Client's own AWS account or other cloud infrastructure that the Client controls directly, which is not a Hybytes sub-processor.
1. Categories of sub-processor we use
• Cloud infrastructure and hosting providers, used to host our own internal tools, ticketing systems, and, where a SOW specifies it, Client-facing environments Hybytes manages.
• Project and issue-tracking tools, used to log and manage support tickets, incidents, and project work.
• Communication and collaboration tools, used for day-to-day communication with Client teams.
• Monitoring and observability tools, used to detect and respond to incidents in managed environments.
• Accounting and billing platforms, used to issue invoices and process payments.
• Email and CRM platforms, used to manage enquiries and client communications.
2. How we vet sub-processors
Before engaging a new sub-processor, we assess its security practices and data protection commitments, and put in place a written agreement imposing obligations no less protective than our own Data Processing Agreement.
3. Notice of changes
We will give Clients at least 30 days' notice before adding a new sub-processor that will process their personal data, so they can raise any objection on reasonable data protection grounds, consistent with Section 4 of our Data Processing Agreement.
Clients can request the current, named list of sub-processors relevant to their engagement, and subscribe to update notifications, by filling out the contact form.