Easy Sites EasySites Legal Back to login

Last updated: 3 April 2026

What this page covers. This register identifies the main providers we use to process Customer Personal Data (as defined in our DPA) or to deliver core EasySites support and infrastructure. If we use separate providers primarily for EasySites-owned pages or controller-side product-improvement activity, we identify them distinctly so the boundary stays visible.

Scope & safety. For transparency, we publish only provider name, role, broad data categories, and processing regions. We do not publish credentials, internal identifiers, network details, or system diagrams. We review each provider's security posture, flow down GDPR Article 28 obligations, and restrict access to the minimum necessary.

Change notifications. Subscribe via legal@easysites.uk to receive at least 30 days' notice of proposed changes; you may object on reasonable grounds under our Terms.

Return to Terms & Conditions

  • Amazon Web Services EMEA SARL (AWS) - Primary hosting infrastructure (compute, storage, databases, managed networking). Data: account data, website content, media assets, backups, operational telemetry. Regions: EU (Ireland) and United Kingdom.
  • Cloudflare, Inc. - Content delivery, DNS, DDoS mitigation, and web application firewall. Data: DNS records, TLS metadata, visitor IP addresses and request headers. Regions: Global edge network with EU/UK data localisation policies.
  • Mesh Digital Limited (trading as Domainbox) - Domain registrar and registry gateway for non-.uk TLDs. Data: registrant contact details, domain configuration, WHOIS/RDAP data required by registries. Region: United Kingdom.
  • Nominet UK - Registry services for .uk domain names. Data: registrant contact details, domain lifecycle events, WHOIS/RDAP data required by registry policy. Region: United Kingdom.
  • Plesk International GmbH - Control panel and server management platform for EasySites hosting and email services. Data: customer website files, databases, email mailbox metadata, hosting account credentials. Regions: United Kingdom and European Union (infrastructure operated by EasySites).
  • ActiveCampaign, LLC (Postmark) - Secondary transactional email delivery and domain authentication services. Data: recipient email addresses, message bodies, delivery diagnostics. Region: United States.
  • Zendesk, Inc. - Customer support desk, ticketing, and knowledge-base tooling. Data: customer contact information, ticket content, attachments supplied by customers. Regions: European Union and United States.
  • Slack Technologies, LLC - Internal incident response, operations, and change-notification messaging. Data: limited operational alerts, ticket references, user identifiers for triage. Region: United States with EU data residency features.
  • Functional Software, Inc. (Sentry) - Application monitoring and error diagnostics. Data: stack traces, request metadata, IP addresses, user IDs present in error context. Regions: European Union.
  • CleanTalk Inc. - Anti-spam and abuse detection for public forms. Data: form submission metadata, IP addresses, user-agent strings. Region: European Union.
  • OpenAI OpCo, LLC - Optional AI-assisted tooling for content generation and support summaries. Data: prompts and responses supplied by users when AI features are enabled. Regions: United States (processed under OpenAI enterprise terms).

We contractually require each sub-processor to maintain appropriate technical and organisational measures, assist with data-subject rights, and flow down GDPR requirements to their own sub-contractors. We remain accountable for their acts and omissions.