Sub-processors
Last updated: 15 May 2026
GraftLog Ltd uses the following sub-processors to deliver the platform. Each provider is bound by a data processing agreement and processes personal data only on our documented instructions. We notify customers of material changes to this list at least 30 days in advance via email or an in-app notice.
Cloudflare, Inc.
Privacy policy →- Purpose
- Hosting, edge compute, database (D1), object storage (R2), CDN, DDoS protection
- Data
- All account and business data, server logs
- Location
- UK / EU primary regions
Clerk, Inc.
Privacy policy →- Purpose
- Authentication, sign-in, session management
- Data
- Email, name, sign-in metadata
- Location
- United States (UK SCCs in place)
Stripe Payments UK, Ltd.
Privacy policy →- Purpose
- Subscription billing and payment processing
- Data
- Billing email, subscription status, payment method (held by Stripe)
- Location
- UK / EU / United States
Mistral AI
Privacy policy →- Purpose
- Receipt OCR and AI-assisted quote/invoice item generation
- Data
- Receipt images and prompt text submitted by the user
- Location
- European Union
Resend, Inc.
Privacy policy →- Purpose
- Transactional email delivery (account, billing and support emails)
- Data
- Recipient email address, email content
- Location
- United States (UK SCCs in place)
Questions about a specific sub-processor? Reach us via the contact page.