Last updated: 15 April 2026
The following third-party services process personal data on our behalf to deliver the BehaviouralSafety.org platform. All transfers outside the UK/EEA are covered by Standard Contractual Clauses (SCCs).
Purpose: Cloud infrastructure — database hosting, file storage, application deployment, cron job scheduling
Location: EU (Stockholm, eu-north-1)
Data processed: All platform data (encrypted at rest with AES-256)
Purpose: Payment processing — subscription billing, survey purchases, refunds
Location: USA (SCCs in place)
Data processed: Consultant name, email, payment card details (handled directly by Stripe, not stored on our servers)
Purpose: Transactional email delivery — welcome emails, survey invitations, reminders, notifications
Location: USA (SCCs in place)
Data processed: Recipient email address, email content
Purpose: AI-powered analysis — survey insights, root cause analysis, corrective action generation
Location: USA (SCCs in place, zero data retention API)
Data processed: Anonymised survey scores and demographics (no personal identifiers sent). OpenAI does not train on our data.
Change notification: We will update this page if we add or change sub-processors. Material changes will be communicated via email to all active consultants with at least 14 days notice before the new sub-processor begins processing data.
For questions about our sub-processors or data processing, use our contact form.
See also: Privacy Policy · Data Processing Agreement
Hi Vis Safety Ltd · BehaviouralSafety.org · Registered in England and Wales