Trust

Sub-processors

Organisations that process personal data on behalf of Vox while Vox provides the workplace reporting channel.

Draft register. Keep current before and after launch. Last updated 2 November 2026.

Customer organisations give general authorisation for the sub-processors below, as described in the data processing agreement. Material changes receive at least 30 days’ notice.

Sub-processor	Role	Data	Location
Render	Cloud hosting: application, private PostgreSQL database, logs, and backups for the invite-only production MVP	Service data, including encrypted case material	European Union (Frankfurt)
Transactional email provider (TBC)	Handler notification email (not enabled while email is off)	Handler email address and notification metadata. No case content.	To be confirmed before email is enabled
Malware scanning provider (TBC)	Reserved for a future encrypted attachment feature. Attachments are disabled in this release.	Not used while attachments are disabled.	Not applicable until attachments ship

Notes

Case content is end-to-end encrypted. Sub-processors that only handle ciphertext cannot read plaintext reports.

Handler notification emails do not include case content. They only say that a message is waiting.

Questions about this register: privacy@vox.uk.