Subprocessors
Last updated: 6 May 2026
Magpire is operated by Magpire Ltd, a company registered in England and Wales under company number 17172989. We engage the following subprocessors to deliver the Service. Each is bound by a written Data Processing Agreement (DPA) and processes personal data only on our documented instructions. Where a subprocessor sits outside the UK or EEA we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses (SCCs), or an adequacy decision — whichever applies to that processor.
Updates to this list
We’ll email account owners and post a notice here at least 30 days before adding a new subprocessor that processes account data. If you object to a proposed change, contact sam@magpire.comwithin that window and we’ll work with you on a resolution.
Active subprocessors
| Processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Supabase | Application database, authentication, file storage | EU (Frankfurt) | UK GDPR — within EEA adequacy |
| Vercel | Application hosting, edge compute, request logs | Global edge (primary functions in EU) | UK Addendum to SCCs (where US edges are used) |
| Stripe | Payment processing, subscription management, invoices | UK + EU + US | UK Addendum to SCCs; Stripe’s subprocessor list at stripe.com/subprocessors |
| Anthropic | AI inference for content generation and relevance scoring. Inputs and outputs are not used to train models per Anthropic’s commercial terms. | United States | UK Addendum to SCCs |
| Perplexity | AI search engine citation checks | United States | UK Addendum to SCCs |
| DataForSEO | SERP and keyword data for visibility scoring | United States | UK Addendum to SCCs |
| Resend | Transactional + product email delivery | United States | UK Addendum to SCCs |
| Sentry | Error monitoring and observability | EU + US | UK Addendum to SCCs (US instances) |
| Inngest | Background-job orchestration for audits and digests | United States | UK Addendum to SCCs |
| Upstash | Rate-limit storage | EU | UK GDPR — within EEA adequacy |
| Google (Search Console, Business Profile, Tag Manager) | Optional integrations the firm authorises explicitly. Only the data the firm grants access to is processed. | Global | UK Addendum to SCCs / Google’s standard data terms |
Data Processing Agreement
A copy of our standard DPA — entered into between Magpire Ltd (company number 17172989, registered in England and Wales) and the customer — is available on request. Email sam@magpire.comwith your firm details and we’ll send the current version.
Questions
Anything about how a subprocessor handles your data, or to request the DPA, email sam@magpire.com.