Sub-processors
The providers that process personal data for Usertick's customers, and where.
Last updated: November 1, 2026
Usertick Ltd (“Usertick”) processes personal data on behalf of its customers under the Data Processing Addendum (the “DPA”). This page lists the sub-processors that Usertick engages to process that personal data (“Customer Personal Data”), what each one does and where it processes the data. Usertick has a written contract with each sub-processor that imposes data protection obligations no less protective than those in the DPA, and Usertick remains responsible to its customers for the performance of each sub-processor.
1. Current sub-processors
| Sub-processor | Purpose | Personal data | Location |
|---|---|---|---|
| Microsoft Corporation and Microsoft Ireland Operations LtdMicrosoft Azure, including Azure OpenAI Service | Hosting of the Usertick application and its databases, including the storage and analysis of survey responses, and the generative AI features: creating surveys, dashboards and workflows, editor help, translation, written readings and the assistant | All Customer Personal Data held in the application, such as team members, survey content, survey answers and their details, contacts and email records. For the AI features, the requests people type and short excerpts of survey answers | United Kingdom; European Union for an AI model that is not offered in the United Kingdom |
| Cloudflare, Inc.Cloudflare | Content delivery, DNS, security filtering, edge computing and file storage | Requests to Usertick's services, including IP addresses and browser details, and stored files such as respondent uploads, screenshots, signatures and media | Global network; stored files in the European Union |
| Amazon Web Services EMEA SARL and Amazon Web Services, Inc.Amazon Simple Email Service | Email delivery: the survey emails customers send and the notification emails about their organizations | Recipient email addresses and names, and the content of the email | United Kingdom |
| TypeSafe AI, Inc.TypeSafe | AI reading of survey answers (category, theme, sentiment, urgency and other signals) | The answers of a response with the texts of its questions and the survey's name, without the respondent's identifiers, the identity a website sends or the contact details a contact question collects; written answers are sent as the respondent wrote them | United States |
2. Where Customer Personal Data is processed
Usertick stores Customer Personal Data in the United Kingdom. Files are stored in the European Union, which the United Kingdom recognizes as giving adequate protection. Requests pass through Cloudflare’s global network, so a request can be handled in the Cloudflare data center closest to the person who sends it.
The generative AI features run on Microsoft Azure OpenAI Service in the United Kingdom, or in the European Union for an AI model that is not offered in the United Kingdom. The AI reading of survey answers runs with TypeSafe AI, Inc. in the United States, under TypeSafe’s data processing agreement, which incorporates the EU standard contractual clauses together with the UK International Data Transfer Addendum. Usertick’s contracts with both providers don’t allow them to train AI models on the data Usertick sends, and Usertick does not train AI models on Customer Data.
3. Payments
Stripe’s affiliate Sold through Link, LLC (“Link”) is the merchant of record for the payments for paid plans, extra responses and extra emails and processes them for Usertick. Stripe and Link are independent controllers of the payment data they process, under their own terms and privacy policies. They are not sub-processors of Customer Personal Data, and Usertick never receives card details.
4. Services you connect yourself
Services you connect yourself, such as integrations and your own email provider, are not Usertick’s sub-processors. They receive data on your instruction, under your own terms with them.
5. Notice of new sub-processors
Usertick gives reasonable notice before a new sub-processor starts to process Customer Personal Data, or before an existing sub-processor starts to process it in a new country, by updating this page and emailing the owner of each organization. Where Usertick must replace a sub-processor urgently to protect the security or continuity of the service, it may give shorter notice and tells customers as soon as it can. A customer may object to the new sub-processor on reasonable data protection grounds within the notice period by emailing legal@usertick.com. Usertick will then discuss the objection with the customer in good faith. If Usertick cannot reasonably accommodate the objection, the customer may terminate the affected service before the change takes effect.
Questions about this list go to legal@usertick.com.