Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Contabo GmbH | Hosting: servers, database, encrypted backups and email | European Union |
| Cloudflare, Inc. | Edge network: DNS, protection against attacks, and encrypted connections. Traffic passes through; no data is stored there. Cloudflare's sub-processor list | Global edge network |
| MyFatoorah | Subscription payments. Card details are entered on MyFatoorah's own payment page; no card data reaches FTH | Kingdom of Saudi Arabia |
| Have I Been Pwned | Checks whether a new password appears in known data breaches. Only the first five characters of the password's hash are sent; no personal data is sent | Australia |
| Anthropic PBC | AI-assisted analysis | United States |
| Google LLC (Gemini) | AI-assisted analysis | United States and other countries where Google processes data |
| OpenAI OpCo, LLC | AI-assisted analysis | United States |
For the AI providers above: reviewer names and identifiers are replaced by pseudonyms, and photos, email addresses and phone numbers are removed or masked, before content reaches these providers. Details a reviewer writes inside the review text itself may remain. Use of content for model training is turned off, and only paid plans or API accounts are used.
Not sub-processors
- Services a client contracts directly, such as its own AI key or its own CRM.
- Google, as the source of Business Profile data, accessed with the client's authorisation or as the client's appointed manager of its profiles. Google LLC appears above for Gemini only.
- Software FTH uses to build its products, which does not process client data in the running service.
Changes to this list
New or replacement sub-processors are published on this page, and the date above changes. A client may object on reasonable data protection grounds within thirty days of a change, as set out in its agreement with FTH. A sub-processor's own sub-contractors are governed by that sub-processor's terms.
Machine-readable copy
The same list is published at
/subprocessors.json.