1. How to read this list
This list identifies services used or supported by RegInspect and the functions for which information may be disclosed. Availability depends on the feature and deployed configuration. It is not a claim that every listed provider processes every firm’s data.
The supplier’s contractual legal entity, processing region, further processors and transfer safeguards must be verified in the applicable supplier record. A brand name or a provider’s own certification is not a certification of RegInspect. Some recipients, such as payment providers and public registries, may act independently as controllers.
2. Infrastructure and identity
Google Cloud: application hosting, PostgreSQL database, private object storage, operational logs and associated infrastructure. The core production application/database region is London. Other services and provider support arrangements require separate location assessment.
Keycloak: identity software operated as part of the hosted service. It is not, by itself, a separate company receiving data. Where a user selects an external identity provider, that sign-in service processes authentication information under its own arrangements.
3. Feature-dependent services
Stripe — payment processing, billing and subscription administration; billing contacts, customer identifiers and payment information handled in the checkout/payment service.
Twilio SendGrid — transactional email delivery and delivery events; recipient address and the message content needed for the requested communication.
Dilisense — PEP, sanctions and adverse-media screening; submitted identity/search fields and screening results.
Companies House — UK company and ownership lookups; requested company identifiers and public-register results. This is a public registry, not a blanket processor appointment.
Google Gemini — AI assistance where enabled; the prompt and selected information needed for the requested task. Do not submit data outside the firm’s approved purpose.
Onfido — identity verification where enabled; identity details, verification evidence and results.
PandaDoc — electronic signature/document workflows where enabled; the document, signer contact details and signature-event information.
Zoho Desk — support and knowledge-base services where selected; support contact details and information included in a support request. Do not put client records in a support ticket unless a secure, necessary route has been agreed.
New Relic — performance and error monitoring where configured; browser monitoring is subject to the analytics preference.
4. Changes and due diligence
The DPA governs sub-processor authorisation, notice and objections. Ask us for the supplier arrangements relevant to your subscription, including processing locations and safeguards. This public list does not replace the due-diligence record or the firm’s assessment of its own disclosures.
Contact
Drawbridges Business Services Ltd · Company number 15260510
Townshend House, 30
Crown Road, Norwich NR1 3DT, United Kingdom
contact@reginspect.co.uk. For privacy or security matters, include “Privacy” or “Security” in the subject. Do not send sensitive client records in an initial enquiry.