Version v2 | Effective 25 October 2026 | Part Central Limited, trading as Cady (Company 15296116, England and Wales)
This page distinguishes providers processing workspace data on our customers’ behalf from providers used for our own controller purposes and services independently selected by customers. A provider may have different roles for different activities. As described in our Data Processing Agreement, we ordinarily give at least 14 days’ advance notice of an addition or replacement, with the DPA’s limited urgent-change process and objection rights.
Infrastructure and Hosting
| Provider | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Cloudflare | Application hosting (Workers), databases (D1), file storage (R2), task queues, Workers AI and Vectorize (AI and search features), website hosting, CDN, network protection, bot checks (Turnstile), email sending (Cloudflare Email Sending) and forwarding of email sent to team@, data@ and legal@cadyworks.com (Cloudflare Email Routing). Workspace-content hosting and customer-directed messages are subprocessing; our own website, account and security purposes are controller activities. | Company databases and files are stored on the company’s main server, which is in the US or the EU, as shown in its settings. Requests, AI and search processing and Cloudflare email sending may be handled on Cloudflare’s global network. | Cloudflare DPA. Contracting entity: Cloudflare, Inc. (United States). Transfers under the Cloudflare DPA, which incorporates the EU Standard Contractual Clauses and the UK Addendum; Cloudflare is also certified under the EU-US Data Privacy Framework and its UK Extension. |
Billing Providers for Our Controller Activities
Stripe supports our own billing relationship and may act as processor or independent controller for different services. It is not automatically a subprocessor of every customer workspace. Its applicable entities, roles and safeguards are governed by the Stripe terms for the services used.
| Provider | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Stripe | Payment processing (Stripe Checkout and Customer Portal), subscription billing, tax calculation (Stripe Tax), and invoicing | International processing | Contracting entity: Stripe Payments UK, Ltd. Stripe Data Processing Agreement; transfers to Stripe, Inc. under the EU Standard Contractual Clauses and the UK Addendum, and the EU-US Data Privacy Framework and its UK Extension. |
Support Email
| Provider | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Google (Google Workspace) | The Part Central Limited mailbox that receives support, data-protection and legal correspondence | Google global infrastructure, including the United States | Contracting entity: Google Cloud EMEA Limited (Ireland). Google Workspace Cloud Data Processing Addendum, incorporating the EU Standard Contractual Clauses and the UK Addendum; Google LLC is certified under the EU-US Data Privacy Framework and its UK Extension. |
Agents Independently Selected by Customers
Cady uses Cloudflare Workers AI and Vectorize for AI and search features (listed above). You can connect an agent you independently select and contract with, such as ChatGPT or Claude. That host processes tool responses under your agreement and account settings. Merely connecting it does not make it a Cady-engaged subprocessor. Any supplier Cady itself engages to process customer content must be assessed and disclosed separately.