ClashWise
A subprocessor is a third party we use to deliver ClashWise, such as a hosting, AI inference, email or payment provider. We have checked this list against the product code and include only providers we currently use.
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Azure OpenAI | Cloud AI clash naming, Wise chat assistant, AI summaries | Resource and data at rest: Sweden (EU); GlobalStandard inference may occur in other Azure geographies |
| Microsoft Azure Communication Services | Transactional email (password resets, account notifications, etc.) | United Kingdom |
| Microsoft Bookings / Exchange Online | Walkthrough scheduling and storage of booking details | Our Microsoft cloud tenant region, under Microsoft data-location commitments |
| Microsoft Azure Cosmos DB | Primary application database | United Kingdom |
| Microsoft Azure Storage | File storage: viewpoint images, exports, attachments | United Kingdom |
| Stripe | Payment processing | US / EU (Stripe global) |
| PayPal | Legacy billing (Autodesk App Store purchases) | US / EU (PayPal global) |
| Autodesk | Plugin entitlement verification | US |
| Google Analytics | Website analytics (loaded only after cookie consent) | US |
| Microsoft Clarity | Website analytics (loaded only after cookie consent) | US |
| Hetzner | Application hosting | Germany (EU) |
Google Analytics and Microsoft Clarity only load in your browser after you accept analytics cookies. See our cookie policy for what each one does and how to opt out.
Customer data at rest — our primary database (Cosmos DB), file storage (Azure Storage) and transactional email (Azure Communication Services) — is held in the United Kingdom. Application hosting is in the EU (Germany). For Azure OpenAI, the resource and data at rest are in Sweden, within the EU, but the current GlobalStandard deployment may process prompts and responses in other Azure geographies.
The UK is not part of the EU or the EEA. Personal data of EEA data subjects held in the UK is transferred under the European Commission's adequacy decision for the United Kingdom, which permits those transfers without additional safeguards; data held in the UK is also subject to UK GDPR. We do not currently claim EU/EEA-only data residency — if your organisation requires data to remain within the EEA, please get in touch.
Connected AI clients are not subprocessors. Applications your team connects to ClashWise through our MCP support (for example, a desktop AI assistant) are chosen by you and act on your instruction. Data they retrieve is handled under that vendor’s own terms, and you can revoke a connection at any time from Connected apps. They therefore do not appear in the table above.
If we add, remove, or change a subprocessor in a way that materially affects how your data is handled, we will update this page and notify customers.
See also: our security controls and our Data Processing Agreement.