Trust centre
Sub-processors
Last changed 16 October 2026
These are the service providers that process personal data on our behalf to run SEOmise. Each is bound by a data processing agreement. Where data leaves the UK or the European Economic Area, the transfer is covered by an adequacy decision or standard contractual clauses.
| Provider | What for | Personal data | Where | Transfer safeguard |
|---|---|---|---|---|
| Stripe | Taking subscription payments, invoices and the customer billing portal | Name, e-mail address, workspace name, billing address, plan and payment history. Card details go straight to Stripe and never reach us. | Ireland and the United States | – |
| Brevo | Sending service e-mail: invitations, password resets, alerts and reports | Recipient name and e-mail address and the content of the message | European Union | – |
| Anthropic | AI analysis and drafts (audit summaries, link plans, review reply drafts) when you ask for them | The text needed for the task: page and audit findings, and for review replies the review text, which can include the reviewer's name | United States | – |
| Connecting Google Business Profile (locations, reviews, posts, performance) and Google Search Console (search performance of your sites) when you link them | The Google account e-mail used to connect, OAuth tokens, and the business and site data those services return | United States and other Google locations | – | |
| DataForSEO | Backlink and referring-domain data for the websites you add | Domain names and page addresses of your sites and competitors. No personal data about you is sent. | European Union | – |
| WordPress.com mShots (Automattic) | A picture of a website's home page while you add it as a project | The website's public address only. No account, contact or payment details are sent. | United States | – |
Workspace owners: our data processing agreement refers to this list. Accept it from Account → Privacy.