August uses carefully selected third-party companies to help provide our service. This page lists them, what each one does for us, and where it processes personal data. It forms part of our data processing terms and should be read alongside our Privacy Policy.
We have contracts with each of these companies that require them to protect personal data and use it only to provide their services to us. Where a company processes data outside the United Kingdom, the transfer is protected by a recognised safeguard, as explained in section 12 of our Privacy Policy.
1. Sub-processors of customer data
These companies may process the personal data that landlords and property managers put into August, such as tenant details, tenancy documents and rent records, on behalf of our customers.
Company | What it does for August | Where data is processed |
|---|---|---|
| Cloud hosting provider | Hosting, database, document storage and backups. The provider's name is available to customers on request. | United Kingdom |
| Cloudflare | Network security, DNS and bot protection | Global network |
| groundcover | System monitoring and logs | United Kingdom (within our hosting) |
| Plaid | Open Banking connections, rent payments and landlord identity verification | United States |
| Mailgun (Sinch) | Sending emails, and receiving email replies and documents sent to August | European Union |
| Twilio | Text messages, such as login codes, tenant invites and notifications | United States |
| Intelliprint | Printing and posting letters | United Kingdom |
| Intercom | Customer support chat and email | United States |
| OpenAI | AI features, including document analysis, the AI assistant and transaction matching | United States |
| Cloudinary | Storing and processing property and maintenance photos and document previews | United States |
| Ideal Postcodes | Address lookup | United Kingdom |
| Sprift | Property data for property insights | United Kingdom |
| Apple | iOS push notifications | United States |
| Android push notifications and crash reporting | United States | |
| Microsoft | Session analytics in our web app and apps (Microsoft Clarity), and company email | United States (Clarity); United Kingdom (email) |
| Microsoft Azure | Legacy storage, being decommissioned | United Kingdom or European Union |
2. Other service providers
These companies process personal data that August controls, such as account, billing, analytics and marketing data, but do not process the data customers put into August.
Company | What it does for August | Where data is processed |
|---|---|---|
| Stripe | Card payments for web subscriptions and credits | United States and other countries |
| Apple App Store | iOS subscriptions | United States |
| Google Play | Android subscriptions | United States |
| Superwall | In-app subscription screens | United States |
| Amplitude | Product analytics in our mobile apps | European Union |
| AppsFlyer | App install measurement and invite links | European Union |
| Singular | App install measurement | United States |
| Google Analytics | Website analytics, with consent | United States |
| Meta | Website advertising measurement, with consent | United States |
| Ahrefs | Website analytics | United States |
| Framer | Hosting our website and website forms | United States, served worldwide |
| Brevo | Newsletter and marketing emails | European Union |
| Mailchimp | Images in older emails, being removed | United States |
| Typeform | Surveys and research | European Union |
| Slack | Internal team alerts | United States |
3. Organisations that are not sub-processors
Some organisations receive personal data but act independently rather than on our behalf, so they are not listed above. They include HMRC, which receives Making Tax Digital updates when you ask us to send them; the Energy Performance of Buildings Register, from which we receive EPC data; and services you choose to connect, such as Xero. Their use of data is explained in our Privacy Policy.
4. How we tell you about changes
We will update this page before we add or replace a sub-processor in section 1. If you are a customer and want to be told about changes by email, contact [email protected]. If you object to a new sub-processor on reasonable data protection grounds, you can tell us, as set out in our data processing terms.
Changes to the service providers in section 2 are made by updating this page.
5. Requesting more information
Customers can request the name of our cloud hosting provider, or more information about any company on this page, by emailing [email protected].
See all our terms and policies.
