Sub-processor list
Version 1.0. Effective 1 September 2026.
This page lists the third parties Simple AI Ltd (BRN C25225984) engages to process personal data. It is referenced by our Data Processing Addendum and by both privacy policies. It is not a separate contract and does not require acceptance.
Prior versions are archived and available on request.
Platform sub-processors
These process personal data held in client workspaces on the Scopewell platform.
| Provider | Purpose | Location of processing | Retention |
|---|---|---|---|
| cloud.mu | Hosting of the platform, its databases and its backups | Mauritius | For the term of the subscription, plus the deletion periods in the Data Processing Addendum |
| Anthropic PBC | AI processing of content submitted to platform AI features, through the Claude API | United States | Not retained beyond the period stated in Anthropic's commercial data processing terms. Not used to train Anthropic's models |
| Amazon Web Services, S3 | Storage of audio recordings of meetings and workshops made on the platform | Europe. Outside Mauritius | For the term of the subscription, plus the deletion periods in the Data Processing Addendum |
| Grafana Labs, Grafana Cloud | Observability of the platform. Receives OpenTelemetry traces, metrics and logs, including user and organisation identifiers, request paths, timings and error diagnostics | Outside Mauritius, in the Grafana Cloud region configured for our account | Per the retention configured on our Grafana Cloud plan |
No analytics provider is used on the platform.
Website sub-processors
These process personal data collected on the public website at scopewell.ai. They have no access to client workspaces.
| Provider | Purpose | Location of processing | Retention |
|---|---|---|---|
| Hostinger | Hosting of the public website, including server and security logs | European Union | 12 months |
| Google Analytics, Google LLC | Website analytics, where you consent to analytics cookies | United States and other locations under Google's terms | 14 months |
Operational sub-processors
These process account, billing and communication data. They have no access to client workspace content.
| Provider | Purpose | Location of processing | Retention |
|---|---|---|---|
| Google Workspace, Google LLC | Email, platform notifications and support correspondence | United States and other locations under Google's terms | For the term of the relationship |
| Dodobird | Customer relationship management. Receives the enquiry and early-access lead data submitted through website forms | To be confirmed | 24 months where the enquiry does not lead to a contract, otherwise for the term of the relationship |
| PayPal | Subscription payments | Outside Mauritius, under PayPal's terms | As required by accounting and tax law |
Agreements are executed manually. No e-signature provider is used.
Transfers outside Mauritius
Client workspace data. It is stored in Mauritius with cloud.mu. It leaves Mauritius in three cases.
- AI features. Content submitted to a platform AI feature is transmitted to Anthropic PBC in the United States for processing, and the result is returned. No copy is retained beyond the period stated in Anthropic's terms, and it is not used to train Anthropic's models.
- Audio recordings. Audio recorded during meetings and workshops on the platform is stored with Amazon Web Services in an S3 bucket located outside Mauritius.
- Observability telemetry. Traces, metrics and logs emitted by the platform are sent to Grafana Cloud outside Mauritius. This telemetry carries user and organisation identifiers, request paths, timings and error diagnostics. It is not intended to carry workspace content, and error payloads are filtered before transmission.
A client that does not wish its workspace content to leave Mauritius may disable AI features and recording on its workspace. The platform remains usable without them, with reduced functionality. Observability telemetry cannot be disabled per workspace, as it is necessary to operate and secure the service.
Account, billing and communication data. Email and support correspondence is handled by Google Workspace, and subscription payments by PayPal, both processing outside Mauritius.
Website data. The public website is hosted by Hostinger in the European Union, so technical data collected when you visit scopewell.ai, including your IP address and server logs, is processed there. Where you consent to analytics cookies, Google Analytics processes usage data outside Mauritius.
Basis. Every transfer above is made on the basis of appropriate safeguards under section 36(1)(a) of the Data Protection Act 2017, evidenced by our written data processing terms with each provider, proof of which has been provided to the Data Protection Commissioner. The transfers of client workspace data are also necessary for the performance of the contract concluded in the interest of the data subject.
How changes are made
- We publish the change here and notify organisation administrators by email and in the platform.
- The change takes effect no earlier than 30 days after that notice.
- A client or partner may object on reasonable data protection grounds during that period, by writing to [email protected].
- If we cannot resolve an objection, the affected subscription may be terminated without penalty and we refund any prepaid fees for the unused period.
- A change to this list does not create a new version of our terms and does not require re-acceptance.
Provider names above are trading names. The legal entity of each provider is recorded in the contract we hold with it and is available on request.