Sub-Processor Register
Providers used to deliver services that process client data.
Last updated: 25 August 2026 (v1.7). See also: Privacy Policy.
This register supports the sub-processor authorisation and change terms in Clairvynt's client Data Processing Agreements. It covers providers used by Clairvynt to process client personal data. It is not a list of every supplier used for Clairvynt's own corporate administration.
Two processing stages
Stage 1: client personal data. Original client documents and the redaction audit record may contain personal data. Providers that receive this material are sub-processors and appear in the first table below.
Stage 2: validated redacted material. A Stage 2 provider receives no original document, redaction audit record or other means supplied by Clairvynt to identify an individual. The material remains confidential client information even where it is not personal data in that provider's hands.
Stage 2 does not begin for a client until Clairvynt has a versioned anonymisation methodology, validation against that client's document set and written controller acceptance. Until then, the client's material remains within the Stage 1 controls.
Client personal data sub-processors
| Sub-processor | Purpose | Processing location | Safeguard |
|---|---|---|---|
| Microsoft Azure | Application hosting, storage, databases, search and related platform services | United Kingdom | Microsoft Products and Services Data Protection Addendum |
| Microsoft Azure OpenAI Service | Detecting personal information before downstream processing | Microsoft EU data zone, with the resource in Sweden Central | Microsoft Products and Services Data Protection Addendum and UK adequacy regulations |
Where a client deploys a service in its own Azure tenant, the client controls that Microsoft relationship. The client's contract identifies whether Microsoft acts for the client or for Clairvynt in that arrangement.
Stage 2 providers
These providers may receive only client-approved, validated redacted material under the gate above. They are listed for transparency and are bound by confidentiality, security and no-training terms.
| Provider | Purpose | Available processing locations |
|---|---|---|
| Microsoft Azure OpenAI Service | Model inference on validated redacted material | Microsoft regions selected for the service |
| Microsoft Azure AI Foundry, Microsoft-hosted models only | Model hosting and inference on validated redacted material | Microsoft regions selected for the service |
Clairvynt will publish and notify a new Stage 2 provider before routing client material to it. A model developer operating independently from Microsoft is not covered by the Microsoft-hosted entry.
Changes and objections
Clairvynt gives affected controllers at least 30 days' prior written notice before adding or replacing a sub-processor that handles their personal data. A controller may object during that period on reasonable data-protection grounds. Clairvynt will work with the controller on a practical resolution and apply the termination rights in the relevant agreement if no resolution is available.
Moving a client to Stage 2 is governed by its contractual terms and the evidence and written controller acceptance described above. It is not authorised by publication of this page alone.
Maintained by Clairvoyant AI Limited, registered in Scotland under company number SC693791.
Questions: privacy@clairvynt.com