Harriet (JustParent Ltd, company number 14338607) uses the following sub-processors to provide the Harriet platform, website, and related services.
We give customers at least 30 days' notice before adding or replacing a sub-processor (see our DPA). To subscribe to change notifications, email legal@harriethq.com.
Related documents: DPA · Privacy policy · Terms of use
Platform and infrastructure
| Sub-processor |
Function |
Location |
Transfer mechanism |
| Salesforce (Heroku) |
Application hosting and infrastructure |
United States / EU regions |
UK IDTA / EU SCCs + UK Addendum |
| Amazon Web Services |
Cloud storage, email (SES), and related infrastructure |
EU (Ireland) and other regions as configured |
UK IDTA / EU SCCs + UK Addendum; adequacy where applicable |
AI and automation
| Sub-processor |
Function |
Location |
Transfer mechanism |
| OpenAI |
LLM API for chat and workflow features (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) |
United States |
UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| Anthropic |
LLM API for chat and workflow features (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) |
United States |
UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| Google (Cloud / Gemini) |
LLM API and related cloud services (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) |
United States / EU |
UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
Communications and support
| Sub-processor |
Function |
Location |
Transfer mechanism |
| Mailgun (Sinch) |
Transactional email delivery |
EU / United States |
UK IDTA / EU SCCs + UK Addendum |
| Slack Technologies |
Optional customer integration and notifications |
United States |
UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| Microsoft |
Optional Teams integration, authentication, and mailbox features |
United States / EU |
UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
Payments and billing
| Sub-processor |
Function |
Location |
Transfer mechanism |
| Stripe |
Payment processing and billing |
United States / EU |
UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
Analytics, monitoring, and marketing
| Sub-processor |
Function |
Location |
Transfer mechanism |
| PostHog |
Product analytics (consent-gated on website) |
EU / United States |
UK IDTA / EU SCCs + UK Addendum |
| Google (Analytics / Tag Manager) |
Website analytics and advertising tags |
United States |
UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| HubSpot |
Meeting scheduling and CRM for sales enquiries |
United States / EU |
UK IDTA / EU SCCs + UK Addendum; DPF where applicable |
| Sentry |
Error monitoring and application performance |
United States / EU |
UK IDTA / EU SCCs + UK Addendum |
HR integrations
| Sub-processor |
Function |
Location |
Transfer mechanism |
| Merge.dev / Apideck |
HRIS and third-party integration connectivity (as enabled by Customer) |
United States |
UK IDTA / EU SCCs + UK Addendum |
Notes
- Customer-enabled integrations (for example Slack, Microsoft Teams, or a specific HRIS) process data only when Customer configures them.
- LLM providers are sub-processors: relevant Customer Data is shared with them to deliver AI features. They are contractually required not to use Customer Data for model training. Limited retention may apply for service delivery, abuse prevention, and compliance. See our Privacy policy and DPA.
- This list covers sub-processors used to deliver the Services and operate our website. It is updated when we add or replace providers.
Contact
Questions about sub-processors: legal@harriethq.com