Skip to contentAbout Fig Group

Approved sub-processors.

The third parties that may process Inputted Personal Data on behalf of Fig Group customers when delivering the Fig Platform, in each case subject to the obligations set out in clause 6 of Schedule 3 and the security obligations in Annex B to Schedule 3.

Last updated · 6 May 2026 · v2026-05-06

Authorisation

The Customer authorises the Supplier to engage the following Sub-processors.

Each Sub-processor below has been assessed against Fig Group's vendor-due-diligence and security review process, is bound by a written contract no less protective than the obligations Fig owes its Customers, and is restricted to the documented purposes shown in the "Service provided" column. Transfer mechanisms (UK IDTA / EU SCCs) are applied where personal data leaves the UK or EEA.

Section 1.1

Hosting and infrastructure

Sub-processorService providedLocation of processingTransfer mechanism (if outside UK/EEA)
Microsoft Ireland Operations LimitedCloud hosting infrastructure for the Fig Platform (compute, storage, network)UK and EEA primary regionsNot applicable for UK/EEA processing; UK IDTA / EU SCCs for any incidental US support access
CloudFlare, Inc.DDoS protection, WAF, CDNGlobal edge networkUK IDTA / EU SCCs

Section 1.2

Telemetry, monitoring, support and product

Sub-processorService providedLocation of processingTransfer mechanism (if outside UK/EEA)
Datadog, Inc.Application performance monitoring, loggingEU region (where elected)EU SCCs / UK IDTA
Sentry Inc.Error trackingEU regionEU SCCs / UK IDTA
Atlassian Pty Ltd.Customer support ticketing and emailEU region (where elected)EU SCCs / UK IDTA

Section 1.3

Identity, communication and operations

Sub-processorService providedLocation of processingTransfer mechanism (if outside UK/EEA)
SendGridTransactional emailEU regionEU SCCs / UK IDTA
HubSpot Ireland LimitedCRM (User Personal Data only - Supplier as Controller)EU regionEU SCCs

Section 1.4

AI and ML services

Sub-processorService providedLocation of processingCustomer opt-out
Anthropic, PBC / OpenAI, LLC / Mistral AI SASOptional AI features within the Fig Platform (only where the Customer has expressly enabled the relevant feature)EU region or UK region where supportedCustomer may disable AI features in the Fig Platform settings

Notification of changes

How we notify Customers of new or replaced Sub-processors

Fig Group will give Customers reasonable prior notice (typically 30 days, unless an urgent operational or security reason requires shorter notice) before adding or replacing a Sub-processor. Notification will be via email to the Customer's nominated contact and via this page.

Customers wishing to object to a new or replaced Sub-processor should contact enquiries@figgroup.co.uk in line with the procedure set out in Schedule 3.

Questions or DPA requests

Contact for data-processing matters

For a copy of the executed Data Processing Agreement, evidence of Sub-processor due-diligence, or any other data-processing query, please contact our Data Protection Officer at dpo@figgroup.co.uk.