Subprocessors and Service Providers

Last updated Oct 17, 2026

This page lists the providers Infera Engine Ltd may use to run Infera Ad Studio. It supports our Privacy Notice.

Only providers switched on in our owner console are used. The Service is built so that each provider can be switched on or off. A provider that is switched off receives no data. To find out which providers process your data today, ask [to be confirmed].
Processors act only on our instructions, under a data processing agreement.
Separate controllers decide for themselves how they use data, under their own privacy notices. This includes merchants of record, and the sign-in and social platforms where you hold your own account.
We update this page before a new processor starts handling personal data. Business customers who need advance notice can ask [to be confirmed].

The locations below are where each provider says it processes data. We confirm them against each provider's current terms before switching it on.

Payments

Provider	Purpose	Role	Location	Transfer safeguard
Paddle	sells plans and credits as merchant of record; takes payment, handles tax, invoices and refunds	separate controller	United Kingdom, and its own providers	none needed for the UK; Paddle's own safeguards for onward transfers
Lemon Squeezy	sells plans and credits as merchant of record; takes payment, handles tax, invoices and refunds	separate controller	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
Stripe	card and wallet payments, subscriptions, tax calculation, fraud checks	processor; separate controller for its own legal duties	United States and other countries	UK–US data bridge where certified, otherwise IDTA or UK Addendum
PayPal	PayPal and card payments	separate controller	Europe (Luxembourg), United States	UK adequacy regulations (EU); IDTA or UK Addendum
Paymob	cards, wallets and local payment methods in Egypt and the Middle East	processor or separate controller, as its terms say	Egypt and the country of the payment	IDTA or UK Addendum, with a transfer risk assessment
Tap Payments	cards, mada, KNET and Apple Pay in the Gulf	processor or separate controller, as its terms say	Gulf states (GCC)	IDTA or UK Addendum, with a transfer risk assessment

Email

Provider	Purpose	Role	Location	Transfer safeguard
Resend	sending service emails	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
Postmark	sending service emails	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
SendGrid (Twilio)	sending service emails	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
Mailgun	sending service emails	processor	European Union or United States (region we choose)	UK adequacy regulations (EU); otherwise as for the US
Amazon SES	sending service emails	processor	the AWS region we choose (for example London)	none needed for a UK region
Our own mail server (SMTP)	sending service emails	processor (the server's host)	where the server is hosted	as for the host

Sign-in (you choose to use them)

Provider	Purpose	Role	Location	Transfer safeguard
Google, Microsoft, Apple, GitHub, Facebook (Meta), LinkedIn, X	confirming who you are when you sign in with them	separate controller	various, mainly United States and Ireland	we send only the sign-in request; they send us your profile under their own privacy notice

Publishing (at your instruction)

Provider	Purpose	Role	Location	Transfer safeguard
TikTok, Meta (Facebook, Instagram), Google (YouTube), LinkedIn, X, Snapchat	publishing the ads you choose to your own accounts, and reading those posts' statistics	separate controller	various, mainly United States, Ireland and Singapore	sent at your request to an account you hold; the platform's own terms and privacy notice apply

AI and media

Provider	Purpose	Role	Location	Transfer safeguard
Anthropic (Claude)	understanding requests; planning, writing, editing and reviewing ads	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
Microsoft (Azure AI Speech)	voiceovers	processor	[to be confirmed]	none needed for a UK region
ElevenLabs	voiceovers and music	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
OpenAI	images	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
Google (Gemini, Imagen, Veo)	images and video clips	processor	United States and other countries	UK–US data bridge where certified, otherwise IDTA or UK Addendum
fal.ai	video clips, images and music	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
Replicate	video clips, images and music	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
Runway	video clips	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
Luma AI	video clips	processor	United States	UK–US data bridge where certified, otherwise IDTA or UK Addendum
Stability AI	images	processor	United Kingdom and United States	none needed for the UK; otherwise as for the US

Hosting, storage and operations

Provider	Purpose	Role	Location	Transfer safeguard
[to be confirmed]	servers, database and job queues	processor	[to be confirmed]	as for the region
S3-compatible storage (AWS S3, Cloudflare R2, Backblaze B2, Wasabi or DigitalOcean Spaces)	storing uploads, captures and finished ads	processor	the region we choose (UK or EU preferred)	UK adequacy regulations (EU); otherwise IDTA or UK Addendum
Content delivery network for that storage	delivering images and videos quickly	processor	worldwide edge locations	IDTA or UK Addendum
[to be confirmed]	error tracking, uptime and technical logs	processor	[to be confirmed]	as for the region

"IDTA" is the UK International Data Transfer Agreement. "UK Addendum" is the UK Addendum to the EU Standard Contractual Clauses. The "UK–US data bridge" is the UK Extension to the EU–US Data Privacy Framework.