Sub-processors & DPA Summary
The third-party providers Ekselens Limited engages to deliver this service, what data each processes, and where. Procurement teams can download a DPA summary for due diligence.
Download DPA summary (PDF)Ekselens Limited acts as a data controller for its own marketing and enquiry data, and as a data processor for client personal data processed during an engagement. The sub-processors below may process personal data in delivering the service. International transfers are protected by appropriate safeguards (UK IDTA / EU Standard Contractual Clauses) where applicable.
Primary data residency: United States (us-central1 — Council Bluffs, Iowa). This is where the application and database are hosted. Ekselens Limited is a UK company subject to UK GDPR; a UK-based data region is planned following the current pilot.
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Resend | Transactional & notification email delivery (acknowledgements, reports, invitations). | Recipient name, email address, message content. | United States |
| Auth0 by Okta | Admin single sign-on, magic-link authentication and session management. | Email address, authentication metadata. | United Kingdom (Auth0 UK region) |
| Anthropic (Claude) | AI enrichment of assessment outputs — improvement plan, evidence reconciliation and move tailoring. | Assessment responses and engagement context (no special-category data). | United States |
| MongoDB | Primary application database (all stored application data). | All stored application data (leads, assessments, users, logs). | United States (us-central1 — Council Bluffs, Iowa) |
| Emergent | Application hosting platform and managed LLM gateway. | All application data in transit; hosting environment. | United States (us-central1 — Council Bluffs, Iowa) |
| Cloudinary | Brand-asset image hosting and CDN delivery. | Brand / marketing assets (no client personal data). | United States / global CDN |
| Microsoft Clarity | Product analytics and session insight — only active when the visitor consents to analytics cookies. | Pseudonymised usage / interaction data. | United States |
See also our data-retention schedule and privacy policy. For a signed Data Processing Agreement, contact info@ekselens.com.
Last reviewed June 2026. Items marked [TO CONFIRM] are pending verification. The signed DPA governs in the event of conflict.
Book a free 30-minute discovery.
Bring one challenge. Leave with three prioritised next steps and a clear view of whether (and how) Ekselens can help. No slide pitch, no obligation.