CyberProva transparency
Service providers and subprocessors
Providers used to host CyberProva, authenticate users, process payments and deliver service messages.
Provider scope and processing locations
This list describes service-provider roles; the Privacy notice and Terms explain the controller/processor relationship, transfers and subprocessor terms. A provider's role depends on the service and data involved.
- Microsoft Azure UK West: application hosting, database and private evidence storage. Operational logs use Azure hosting in the United Kingdom.
- Microsoft Entra ID and Microsoft Graph: authentication and authorised reads from connected tenants. Processing follows Microsoft's service arrangements.
- Stripe: subscription billing and payment processing, under Stripe's processing arrangements; not a promise of UK-only processing.
Service email and optional assistant
The service uses configured SMTP delivery for invitations and notifications. The deployment's published email-provider name is shown below when configured. Optional assistant processing is listed only when enabled.
- The provider register below names the service-email provider and distinguishes published provider information from any unconfirmed service-specific location.
- Email delivery also involves the recipient's email provider and its processing arrangements.
- See the Terms for the notice and objection process for subprocessor changes.