Subprocessors

Last updated: 12 May 2026

Prism Discovery, a trading name of FunzEventz Limited (Company No. 14903733), engages third-party subprocessors to deliver the service. Each is bound by a written contract requiring data-protection obligations equivalent to our own under Art. 28 UK GDPR. The list below is kept current.

Customers are notified by email to the workspace owner at least 30 days before a new subprocessor begins processing personal data, giving Customer the opportunity to object.

Current subprocessors

Subprocessor	Purpose	Location of processing	Transfer mechanism
Railway Corp.	Application hosting, managed PostgreSQL	European Union	SCCs + UK IDTA
OpenAI, L.L.C.	Large language model inference (content generation, conversational assistant)	United States	SCCs + UK IDTA
Anthropic, PBC	Large language model inference (content generation, conversational assistant)	United States	SCCs + UK IDTA
Google LLC (Vertex AI / Gemini)	Large language model inference; Google Search Console and Google Analytics 4 data retrieval at Customer's direction	European Union, United States	SCCs + UK IDTA
Apify Technologies s.r.o.	Competitor page scraping at Customer's direction	European Union / United States	SCCs + UK IDTA
Stripe, Inc. / Stripe Payments UK Ltd	Billing, payments, invoicing	Ireland, United States	SCCs + UK IDTA
Sendgrid / Postmark / equivalent (TBC)	Transactional and operational email	To be confirmed at selection	SCCs + UK IDTA
Sentry (Functional Software, Inc.) — if enabled	Error reporting and performance monitoring	United States	SCCs + UK IDTA
Meta Platforms, Inc. (Facebook & Instagram)	Social media publishing via Facebook Graph API and Instagram Content Publishing API	United States, European Union	EU SCCs per Meta's Data Processing Terms
LinkedIn Corporation	Social media publishing via LinkedIn Community Management API	United States	LinkedIn DPA with EU SCCs
ByteDance Ltd (TikTok)	Social media publishing via TikTok Content Posting API	United States, Singapore, European Union (Project Clover)	TikTok EU data residency commitments (Project Clover); EU SCCs where applicable

What subprocessors see

Each subprocessor receives only the minimum data needed for its function:

LLM providers (OpenAI, Anthropic, Google) — prompts and context needed to generate the requested output; do not receive our database credentials or aggregate user lists. Providers have contracted not to use Customer data to train their models under standard API terms.
Analytics providers (Google) — Google Search Console and Google Analytics 4 data retrieved via OAuth tokens supplied by Customer; entirely under Customer's direction.
Scraping provider (Apify) — target URLs only, no Customer personal data.
Billing (Stripe) — name, email, billing address, payment details. Payment card numbers are never seen by us; they are handled by Stripe under PCI DSS.
Hosting (Railway) — encrypted database contents, application memory during execution.
Email — recipient address, message content for operational notifications.
Error monitoring (if enabled) — stack traces, non-PII request metadata, sanitised user IDs.
Social media platforms (Meta, LinkedIn, TikTok) — post content (text, images, video links), platform account identifiers (page ID, user ID, organisation ID), and display names. Post content is controlled by the platform after publish. Account identifiers are retained while the connection is active and purged within 30 days of disconnection.

Notifications and objections

To be notified of subprocessor changes, ensure your workspace's owner email is current. Subprocessor changes are announced by email at least 30 days before going live.

To object to a new subprocessor, email [email protected] within the notice period. We will work with you on a resolution; if none can be reached, you may terminate the affected service without penalty.

Historical changes

Date	Change
12 May 2026	Added Meta Platforms, Inc. (Facebook & Instagram), LinkedIn Corporation, and ByteDance Ltd (TikTok) as subprocessors for social media publishing

FunzEventz Limited (trading as Prism Discovery) Company No. 14903733 Registered address: 17a Beckenham Grove, Bromley, BR2 0JN, United Kingdom Email: [email protected]