Trust

Sub-processors

Organisations that process personal data on behalf of Vox while Vox provides the workplace reporting channel.

Draft register. Keep current before and after launch. Last updated 2 November 2026.

Customer organisations give general authorisation for the sub-processors below, as described in the data processing agreement. Material changes receive at least 30 days’ notice.

Sub-processor	Role	Data	Location
Render	Cloud hosting: application, private PostgreSQL database, logs, and backups for the invite-only production MVP	Service data, including encrypted case material	European Union (Frankfurt)
Resend	Transactional email for handler invites and content-free activity notices	Handler email address, invite link metadata, and notification that activity is waiting. No case content.	United States (Resend). Covered by Resend DPA / SCCs as applicable
Malware scanning provider (TBC)	Reserved for a future encrypted attachment feature. Attachments are disabled in this release.	Not used while attachments are disabled.	Not applicable until attachments ship

Notes

Case content is end-to-end encrypted. Sub-processors that only handle ciphertext cannot read plaintext reports.

Handler notification emails do not include case content. They only say that a message is waiting.

Questions about this register: privacy@vox.uk.