Subprocessors

izzytap Portal ("izzytap", "we", "us" or "our") is a Software-as-a-Service provider based in Dubai, United Arab Emirates. To run our platform reliably and securely, we rely on a small number of carefully selected third-party providers, known as subprocessors, some of which may process personal data on behalf of your firm (the "Firm") and its End Clients. This page tells you who those providers are and how we manage them. It should be read together with our Data Processing Addendum and Privacy Policy, which govern how personal data is handled across the izzytap platform.

A subprocessor is a third-party organisation that izzytap engages to process personal data as part of delivering the platform to you. In data-protection terms, where the Firm is the controller of End-Client personal data and izzytap acts as processor, a subprocessor is a further processor appointed by izzytap. Typical examples include cloud hosting, email delivery, error monitoring and payment processing. Each subprocessor only handles the data it needs to perform its specific function, and always under our instructions.

We appoint subprocessors only where they are necessary to operate, secure or improve the platform, and we assess each one for security, reliability and data-protection maturity before onboarding. Every subprocessor is bound by a written contract that imposes data-protection obligations no less protective than those set out in our Data Processing Addendum, including confidentiality, appropriate technical and organisational security measures, and use of the data only for the agreed purpose. izzytap remains fully responsible to you for the performance of its subprocessors' obligations.

izzytap engages subprocessors in the following categories to deliver the platform. We publish categories and functions rather than a fixed vendor list so that this notice stays accurate as our infrastructure evolves; the current provider in each category is available on request via the contact details below.

• Cloud infrastructure & hosting — hosting of the application, databases and encrypted file storage.
• Transactional email & notifications — delivery of magic-link sign-in, system and reminder emails.
• Payment & billing processing — handling of izzytap's own subscription and billing transactions.
• Error monitoring & performance — diagnostic logging to keep the platform stable and secure.
• Analytics & product telemetry — aggregated usage insight to improve the service.

Payment and billing data in the final category relates to izzytap's own account with the Firm, for which izzytap acts as controller; the other categories may involve End-Client personal data processed on the Firm's behalf.

Some of our subprocessors may store or process data outside the United Arab Emirates. Where personal data is transferred across borders, we ensure an appropriate safeguard is in place — such as contractual data-protection commitments in our subprocessor agreements — so that the data continues to receive a comparable level of protection. Further detail on how we handle cross-border transfers is set out in our Privacy Policy and Data Processing Addendum.

Before we add a new subprocessor or replace an existing one in a way that materially affects the processing of your data, we will update this page and, where required under our Data Processing Addendum, give you advance notice so that you have a reasonable opportunity to review the change. If you have a legitimate data-protection concern about a new subprocessor, you may raise it with us using the contact details below, and we will work with you in good faith to address it.

We review our subprocessors regularly and keep this page up to date as providers are added, changed or removed. The categories above reflect our current arrangements as at the last-updated date shown below; this page always represents the authoritative version. We recommend checking back periodically for the most recent position.

If you have questions about our subprocessors, wish to know the specific provider in any category, or want to raise a data-protection concern, please contact us at hello@izzytap.com. This page is governed by the laws of the United Arab Emirates, and any dispute relating to it falls within the exclusive jurisdiction of the competent courts of the United Arab Emirates. Last updated: 25 July 2026.