Suppliers and sub-processors.
Updated 20 September 2026. Enabled and planned providers are identified separately. The records below describe our current evidence; they do not claim a certification or UK-only processing.
Arctic Parade LTD infrastructure
The founder-operated Proxmox application/database host holds workspace data and encrypted backups. This is our own operation rather than a separate hosting sub-processor. Location: United Kingdom. A future VPS or backup provider will be assessed and added before customer data is moved to it.
Postmark (ActiveCampaign, LLC)
Purpose: transactional account, recovery and opted-in review email. Status: enabled. Data: recipient address, message content and delivery metadata. Postmark describes processing in the United States and publishes its infrastructure/service-provider details.
For this account, created after 10 December 2024, the published DPA is incorporated into Postmark’s Terms of Service. Our dated supplier record identifies the UK GDPR terms, UK–US Data Bridge/DPF route and contractual fallback described by the supplier. Status: operator evidence recorded; final external legal review remains open.
Postmark data-processing agreement · Postmark privacy and supplier details
Stripe
Purpose: subscription checkout, billing and customer self-service. Status: enabled. Data: company/contact and billing details, payment information and subscription references. Stripe hosts card collection; Arctic Parade does not receive or store card numbers.
Stripe’s published DPA forms part of its services agreement and describes controller/processor roles, international-transfer mechanisms and service providers. Arctic Parade’s dated review records those published safeguards. The Stripe Dashboard remains the evidence source for the account’s accepted contracting entity and terms.
Stripe data-processing agreement · Stripe services agreement · Stripe service providers
Microsoft Azure
Purpose: a customer-authorised connector requests inventory and Advisor observations from the customer’s selected subscription. Status: optional and disabled until a workspace configures it. The customer’s Microsoft arrangements govern its estate. This does not imply tenant-wide consent, Microsoft SSO or independently validated live connectivity.
Customer-connected cloud providers
Microsoft Azure, Amazon Web Services, Google Cloud and DigitalOcean receive only the API requests and credentials that an administrator authorises for its own estate. The customer’s agreement with that provider governs the cloud account. Arctic Parade encrypts connector credentials and does not use them for advertising or AI training. A provider card marked documented or awaiting validation does not represent live interoperability certification.
Changes and objections
We normally give account contacts 30 days’ advance notice before adding or replacing a sub-processor for workspace data, with an opportunity to object on data-protection grounds. Email arran@arcticparade.com for the current assessment or to raise an objection.