Skip to content

Sub-processors

The companies that help us run hailo and process personal data on our behalf, so you know exactly who handles your venue's data.

Last updated 3 November 2026

What this list is

When your venue uses hailo, we process the details of your volunteers, staff, keyholders and hirers as your processor, under our data processing terms. We use a small number of other companies, called sub-processors, to do that. Each one is bound by a written contract with the same data protection obligations we have to you.

The AI that drafts your plans never sees anyone's name, and the assistant's questions have personal details removed before they're sent. Your plans' private details, like where keys are kept, are only ever shown to the people you choose. They're never on a public page.

Current sub-processors

CompanyWhat they doDataWhere
Microsoft (Azure)Hosting the app, its database, files and encryption keysEverything a venue adds to hailoUnited Kingdom (Azure UK South)
Microsoft (Azure OpenAI, in Microsoft Foundry)Drafting procedures from a venue's answers about its building, and the app's assistantAnswers about the building, and questions asked in the assistant with personal details removed. Never anyone's name or what a venue's procedures sayAny Azure region where Microsoft runs the model, the United States included
Amazon Web Services (Amazon SES)Sending emails: sign-in codes, briefing links and remindersNames, email addresses and the email's contentUnited Kingdom (London)
StripeTaking payments for plans and processing cardsThe bill payer's name, organisation, address and payment details (we never see card numbers)Ireland (Stripe Payments Europe Ltd), with processing by Stripe, LLC in the United States (UK-US data bridge)
CloudflareHosting this website, and network security in front of the appConnection details such as IP addresses and the requests your browser makesUnited States and Cloudflare's global network (UK-US data bridge)

Changes to this list

We'll email your account's owner at least 30 days before we add or replace a sub-processor. If you object on reasonable data protection grounds, tell us at hello@gethailo.co.uk within that time and we'll work with you to resolve it. If we can't, you can cancel before the change takes effect.

Questions about our sub-processors? Email hello@gethailo.co.uk.