Sub-Processors
Last updated: 1 June 2026
Quorate uses the following sub-processors to provide the Platform:
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, file storage, email delivery | All platform data | United Kingdom (London, eu-west-2) |
| Stripe | Payment processing | Payment card details, billing addresses, invoice data | United States and other countries where Stripe operates (see section 4a of the Privacy Policy) |
Used only if your organisation turns the integration on
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| TrueLayer | Open-banking bank feed | Bank account and transaction data for the accounts your organisation connects | As set out in TrueLayer's data processing terms |
| GoCardless | Direct debit collection | Payer names, bank account details and mandate data | As set out in GoCardless's data processing terms |
HMRC and Companies House are public authorities that your organisation instructs when it files a VAT return, submits a Gift Aid claim or looks up a company. They are not our sub-processors and are not listed in the tables above.
Changes
We will notify you of any changes to this list at least 30 days before the new sub-processor begins processing data.
Contact
Sub-processor enquiries: privacy@quorate.app