Last updated: 13 April 2026 · Voov Digital Limited T/A BeansSuite · Company No. 08871876
Voov Digital Limited T/A BeansSuite ("BeansSuite") uses the third-party sub-processors listed below to deliver the Service. Each sub-processor has been assessed for compliance with UK GDPR and EU GDPR requirements, and appropriate transfer safeguards are in place where data is transferred outside the UK or EEA.
We notify customers of material changes to this list by updating this page and, for significant additions, by email. Customers may object to a new sub-processor by contacting privacy@beanssuite.com within 14 days of notification.
| Sub-processor | Purpose | Data processed | Country | Transfer safeguard |
|---|---|---|---|---|
| Render Services Inc. render.com |
Cloud hosting, compute, PostgreSQL database | All platform data including CRM records, user accounts, audit logs | United States | EU SCCs / UK IDTA |
| Google LLC Google Drive API |
File storage — documents, attachments and signed PDFs stored in subscriber's own Google Drive | Files uploaded by subscribers; OAuth tokens (stored encrypted, per company) | United States | EU SCCs / UK IDTA |
| Google LLC Google Places / Geocoding API |
Address autocomplete and geocoding for People, Organisations and Deal records | Address strings submitted for lookup; no personal data stored by Google beyond the API request | United States | EU SCCs / UK IDTA |
| Amazon Web Services (AWS) Amazon SES |
Transactional email delivery — e-signature OTPs, quote delivery, system notifications | Recipient email address, email content | United States / EU (EU region where configured) | EU SCCs / UK IDTA |
| Cloudflare, Inc. Cloudflare R2 Object Storage |
File storage — documents, attachments and uploaded files stored in R2 object storage | Files uploaded by subscribers and their clients; file metadata. EU-jurisdiction bucket used (data stored within the EEA). | United States (storage: EU) | EU SCCs / UK IDTA · EU data residency bucket active |
| OpenTimestamps opentimestamps.org |
Blockchain timestamp anchoring for e-signed documents (E-sig Tier 2) | SHA-256 hash of signed document only — no personal data, no document content transmitted | Decentralised (Bitcoin network) | No personal data transferred |
| ClickUp Technologies Inc. ClickUp |
Internal bug and feedback reporting — tester phase only; disabled before customer go-live | Feedback text, optional screenshot (no CRM data submitted) | United States | EU SCCs / UK IDTA · Tester phase only |
The following sub-processors are planned for future modules. This page will be updated before each goes live.
| Sub-processor | Purpose | Status |
|---|---|---|
| Stripe Inc. | Payment processing — quote payment links, milestones, subscriptions | Planned (Payments module) |
| GoCardless Ltd. | Direct debit payment processing | Planned (Payments module) |
| ClickSend / Twilio | SMS notifications — appointment reminders, event confirmations, SMS 2FA | Planned (SMS module) |
| Datadog Inc. | Application performance monitoring, logging and observability — integrated via Render | Planned (Infrastructure / Render integration) |
BeansSuite maintains data processing agreements (DPAs) with all active sub-processors. Copies are available on request by contacting privacy@beanssuite.com.
Where a subscriber connects their own third-party accounts (e.g. Google Drive via OAuth), the subscriber acts as the controller for data transferred to those services. BeansSuite facilitates the connection but is not responsible for the sub-processor relationships of the subscriber's own integrations.