Sub-processors

Last updated: 12 May 2026

This page lists the third-party service providers Olive uses to deliver the service. Where a sub-processor is based outside the United Kingdom, the safeguard column states the lawful transfer mechanism we rely on under UK GDPR Chapter V.

If you are a paying Olive client, this list also forms part of the sub-processor schedule referenced in our Data Processing Addendum. We will give you reasonable notice before adding or replacing a sub-processor.

Active sub-processors

Sub-processor Purpose Country Transfer safeguard
Anthropic PBC AI model (Claude). Processes the content of messages and attachments to generate the work product. Commercial API; data not used for training. United States UK Extension to EU–US Data Privacy Framework. Verify.
Brave Software Inc. Web search API used by Olive for industry research and public-data lookups. United States UK Extension to EU–US Data Privacy Framework.
Cloudflare, Inc. DNS, CDN, edge security, and DDoS protection for the website and client portal. United States
UK PoPs		 UK Extension to EU–US Data Privacy Framework + UK IDTA.
Stripe Payments UK Limited Payment processing. Stripe is an independent data controller for payment data, not a processor on our behalf. United Kingdom Independent controller; no additional transfer safeguard required from Olive.
GoDaddy / Titan Email Mailbox hosting and SMTP delivery for [email protected]. United States UK Addendum to EU Standard Contractual Clauses.
Cloud infrastructure Server hosting and encrypted backup of project data. United Kingdom No international transfer.
Plain-English summary. When you send work to Olive, the content of your message and attachments is sent to Anthropic in the United States to generate the deliverable. The transfer is covered by a UK-government-approved framework (the UK Extension to the EU–US Data Privacy Framework). Stored project data sits on UK servers. Your payment details go to Stripe in the UK and we never see them.

Adding or changing sub-processors

If we add a new sub-processor, or replace one of those listed above, we will update this page and email any paying client who has signed our Data Processing Addendum at least 14 days before the change takes effect. You may object in writing; if we cannot accommodate the objection we will work with you to find a fair resolution, which may include terminating the affected service.

Questions or concerns

Write to us at [email protected]. For statutory complaints you can also contact the UK Information Commissioner’s Office: ico.org.uk.