Sub-processors
Version 1, published 23 Oct 2026
The short version
- A sub-processor is another company that handles your organisation's information so that we can run KimonComply.
- This page lists every one, what each does and the kinds of information it handles.
- When we add one, we update this page first, with the date the change takes effect, and you can object.
What a sub-processor is
Your organisation decides what happens to the information it puts into KimonComply, and Kimon Services (UK) Ltd handles that information on its behalf. A sub-processor is another company we use to do part of that work for us, such as the machine the product runs on or the service that sends our email.
Our data processing agreement sets out how we handle your organisation's information, and our privacy notice says what we hold about you and why.
The companies we use
These are all the companies that handle information for us, what each one does, the kinds of information it handles, and where.
Hostinger KVM VPS
The machine the application and its database run on.
Nearly everything, including your organisation's documents, records, registers, audits and findings, the record trail, and people's names and email addresses.
Where: United Kingdom, in Manchester.
Cloudflare R2
Storing the files the product keeps.
The files you upload as evidence, the photographs attached to findings, and the PDFs the product produces.
Where: European Union. The region was set when the storage was created and cannot be changed.
Resend
Sending the reminders, notices and other email the product sends.
The address each message goes to, and the message itself.
Where: It sends from the European Union. It keeps its records of sent email in the United States.
Better Auth
Signing in, your session, and which organisation you belong to. It is software that runs inside our own application, on the machine above.
Your name and email address, your password kept only as a scrambled version that cannot be read back, and your sessions.
Where: The same machine in the United Kingdom.
Stripe
Taking payments, when an organisation pays for a module. Card details are typed on Stripe's own pages and never reach us.
What a payment needs, which is an email address, the billing address and country, and a VAT number if one was given.
Where: Stripe's own systems, under Stripe's arrangements, which are set out on its website.
Kimon Global Delivery
A separate Kimon company whose staff are the compliance officers who run the property service, and who help with support.
Renter contact details, safety certificates, Right to Rent copies, and the records of organisations they help with support.
Where: It stores nothing. Its staff will reach information stored in the United Kingdom and the European Union, only through KimonComply, and only once an approved data transfer agreement is signed.
Changes to this list
Kimon Global Delivery joins this list on 15 December 2026.
When we add a company to this list, we update this page first, with the date the change takes effect. This page is how we tell you about a change to the list. Please look at it again from time to time. Each change is a new version of this page, with its version number and the date it was published at the top.
You can object to a new company. Write to info@kimonservices.com before the date the change takes effect, say which company and why, and we will answer you.
Your organisation can stop using a module, or close its account, at any time. Our platform terms say what happens to its records when it does.
How to ask about this list
If you have a question about any company on this list, or about what one of them does with your organisation's information, write to info@kimonservices.com.