Legal
Sub-processors
The providers Cleva uses to process our clients' personal data, under our data processing agreement.
Last updated 3 October 2026
Current sub-processors
| Provider | What they do for Cleva | Personal data involved | Where | Transfer safeguard |
|---|---|---|---|---|
| Meta Platforms Ireland Ltd (WhatsApp Business Platform) | Delivering WhatsApp messages between Barbara and your users | Phone numbers, WhatsApp user IDs, messages, documents and voice notes | EU, US and other Meta data centres | UK adequacy regulations / UK-US data bridge / IDTA |
| Kapso SpA | WhatsApp API platform connecting Cleva to the WhatsApp Business Platform | Phone numbers, WhatsApp user IDs, messages and media | Chile and its hosting providers' locations | UK Addendum to the EU Standard Contractual Clauses / IDTA |
| Anthropic PBC | AI model that reads documents and drafts answers | Document content and messages sent for processing | United States | UK-US data bridge or IDTA; no use for model training |
| Elestio | Managed hosting of Cleva's database and workflow engine, including Meeting Cost Meter data | All service data held by Cleva | London, United Kingdom | Not applicable (UK) |
| Cloudflare, Inc. | Website and Meeting Cost Meter app hosting, security, intake email routing and email sending | Emails and attachments sent to your Cleva address; meter requests passing to our database; website technical data | Global network, including the UK, EU and US | UK-US data bridge / IDTA |
Xero and Microsoft Teams are not sub-processors: they are your own systems, which you connect to Cleva. Stripe processes billing information for Cleva's own account management, under our privacy notice.
Changes
We give at least 30 days' notice of any new or replacement sub-processor, by email to account holders and on this page. To raise an objection, email [email protected].