1. How this list is used
HSEQ ConsultHub Ltd uses the providers below to host, store, send email, take payment when live charging is enabled, and monitor the service. We do not sell personal data. The Data Processing Agreement explains how consultancy firms may object to a new material sub-processor.
2. Current material providers
| Provider | What it is used for |
|---|---|
| Render | Application hosting and durable file storage. |
| Neon | PostgreSQL database for hosted environments. |
| Resend | Transactional email such as invitations and notifications. |
| Stripe | Card payments when live charging is enabled for that environment. An environment may still be in simulate mode. |
| GoCardless | Direct Debit collection if the Founder enables it for that environment. It is not charged today. |
| Sentry | Error monitoring when a DSN is configured for that environment. Secrets are scrubbed. |
| Cloudflare | DNS, TLS and related edge protection when it sits in front of the hosted site. |
| Upstash Redis | Optional shared rate-limit store when that backend is configured. |
| Expo / EAS | Used to build the mobile app. It does not host workspace data. |
3. Changes
HSEQ ConsultHub Ltd will update this list and the Privacy Policy before a new material sub-processor starts processing personal data on behalf of consultancy firms.
4. Changes to this document
HSEQ ConsultHub may update this Sub-processors list from time to time to reflect platform changes, legal requirements, security improvements or commercial developments. The date at the top of the published page is the current version. Continued use of the platform after that date is acceptance of the updated document, except where a signed written agreement with HSEQ ConsultHub Ltd says otherwise.
5. Governing law
This Sub-processors list is governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction over any dispute arising out of or in connection with it, except that HSEQ ConsultHub Ltd may seek injunctive or other relief in any court of competent jurisdiction to protect its intellectual property, confidential information or platform security.