Sub-processors
Last updated: 30 July 2026
Outtrn™ is operated by Acumine Ltd. This page lists every third party that processes personal data on our behalf in order to run the platform, what it does, where it processes data and the safeguard we rely on for any transfer outside the United Kingdom. It is referenced by our Data Processing Addendum and our Privacy Policy.
We notify customers at least 30 days before a new sub-processor starts processing their data, which gives them time to object as set out in the Addendum. This page is the authoritative list; if you would like to be told of changes by email, contact support@acumine.com.
Current sub-processors
| Provider | What it does | Personal data involved | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Supabase, Inc. | Database, sign-in, and file storage — the system of record for every workspace | All platform data: account identity, permissions, audit and sign-in records, uploaded programme files and derived dashboards | United Kingdom (London) | Data stored in the UK. Standard Contractual Clauses with the ICO's International Data Transfer Addendum cover supplier access from outside the UK |
| Vercel, Inc. | Application hosting | Data in transit as you use the platform; request metadata including IP address | United Kingdom (London) for application compute; the content delivery network is global | Standard Contractual Clauses with the UK International Data Transfer Addendum, incorporated by reference into Vercel's data processing addendum |
| GitHub, Inc. (a Microsoft company) | Runs the automated analysis that converts an uploaded programme file into a dashboard | The contents of uploaded programme files, including any individuals named in them — typically the programme's author or last reviser | Determined by GitHub; may be outside the UK, including the United States | GitHub Data Protection Agreement, incorporating Standard Contractual Clauses and the UK Addendum |
| Functional Software, Inc. (Sentry) | Software fault monitoring | Technical fault details. Configured not to attach IP addresses, cookies or request contents | European Union (Frankfurt, Germany) | Stored in the EEA, which UK adequacy regulations permit without additional safeguards. The EU–US Data Privacy Framework and its UK Extension, with Standard Contractual Clauses as a fallback, cover supplier support access from the United States |
| Resend, Inc. | Sends platform notification emails | Recipient email address and the project name referenced in the notice | United States | Standard Contractual Clauses with the UK Addendum, incorporated into Resend's data processing addendum |
| Upstash, Inc. | Rate limiting, to protect sensitive endpoints from abuse | Short-lived counters keyed to an IP address or account identifier. No workspace content | United States | Standard Contractual Clauses covering EEA and UK restricted transfers |
| Anthropic, PBC | AI assistance used by our own staff to operate and support the platform — for example investigating a support query or diagnosing a fault. AI tooling acts under our staff's direction; it is not a feature of the platform itself | Data our staff examine while resolving a support request or operating the platform, which can include account details and workspace content relevant to the query. Under Anthropic's commercial terms this data is not used to train AI models | United States | Standard Contractual Clauses with the UK Addendum, incorporated into Anthropic's Data Processing Addendum |
Notes
Microsoft sign-in.Access to the platform is by Microsoft account. When you sign in, Microsoft authenticates you and tells us who you are. Microsoft is not acting as our sub-processor in that exchange — it is your own or your employer's identity provider, governed by the agreement between you and Microsoft.
Programme file analysis. The GitHub row above is the one place where workspace content is processed on infrastructure whose location we do not control. We are working to move this processing to a host we can pin to the United Kingdom; until then it is declared here rather than left implicit.
AI assistance.The platform itself contains no artificial intelligence features: programme analysis is conventional, deterministic data processing that produces the same result from the same file every time. The Anthropic row above covers our own staff's use of AI tooling to support and operate the platform. We do not use customer data to train AI models, and we only use AI providers whose terms prohibit training on it. If AI features are ever added to the platform itself, the providers involved will be added to this list with the notice period described above before any customer data reaches them.
Change history
| Date | Change |
|---|---|
| 30 July 2026 | First publication of this page. Vercel Analytics was removed from the platform on the same date and is no longer a sub-processor. Sentry's processing location confirmed as the European Union (Frankfurt). Anthropic included in the founding list for AI-assisted support and operations. |