// LEGAL / SUBPROCESSORS

WHO TOUCHES YOUR DATA.

When RetailGuard processes your shop's data, a small number of providers help us do it. Each one is bound by contract to the same duties we owe you. This is the current list, and you hear from us before it changes.

The list

Last updated 25 July 2026.

OracleHosts the application and the database that holds your shop's cloud copy. EU hosting.
CloudflareServes this website and the public status page. United States company, EU points of presence, EU data protections in place.
MistralReads invoice documents for the invoice scanner. France, EU hosting.
Amazon Web ServicesPowers the question answering behind Ask Your Shop. EU and United States regions, standard contractual safeguards.
FormSubmitRelays contact form submissions to our inbox. Only sees the name and contact details you type into the form, and only when you submit it.
GoogleDelivers the website's font files, and our sales inbox runs on Gmail, so messages you send us are stored there.

What they never get

Your shop's trading data is never sold, never shared between these providers beyond the single purpose listed, and never used to benefit anyone but you. Each provider processes only what its job requires.

Changes and your right to object

If we intend to add or replace a provider, we update this page and tell account holders by email at least 30 days before the change takes effect. If you object, tell us within those 30 days: we will find another way to deliver the feature, or you can end your plan without penalty. This mirrors the authorisation and objection rights in Article 28 of the GDPR.

Due diligence

Before any provider joins this list we review its security posture, where it processes data, and the contract terms that bind it. The same data protection obligations we owe you flow down to every provider on this page.

Grounding: GDPR Article 28(2) and 28(4), gdpr-info.eu. Irish Data Protection Commission guidance on controller and processor contracts. Page structure follows the public subprocessor registers of Stripe and Intercom. EDPB Opinion 22/2024 on the use of processors and subprocessors.

Questions about data handling? Ask before you start.Book a free margin scan