FundSorted is a fully managed platform that charities and mosques use to take donations, process Gift Aid, and message their donors. In delivering that service, we rely on a small number of infrastructure providers — sub-processors — to handle specific pieces of the work. This page lists every sub-processor currently in use, what it does, and where it’s based, so that any charity we act as a Data Processor for (see our Data Processing Agreement) can see exactly who touches their donors’ data on our instruction.
We only add a sub-processor when it’s genuinely necessary to deliver the service, and we review this list whenever that changes. If we add or replace a sub-processor, we’ll update this page and notify current clients by email in advance, giving you the chance to raise an objection before the change takes effect.
Sub-processors we engage
| Sub-processor | What it does | Data involved | Location |
|---|---|---|---|
| Amazon Web Services (Amazon SES) | Sends transactional emails on your behalf — donation receipts, Gift Aid confirmations, and account notifications. | Donor name and email address, and the content of the email being sent. | United States |
| Hetzner Online GmbH | Hosts the servers, databases and backups that run the FundSorted platform. | All data held in the platform, at rest. | Germany (EU) |
Services you connect yourself — not our sub-processors
FundSorted also integrates with Stripe (payments), the WhatsApp Business Platform (messaging), and Anthropic’s Claude (the AI assistant behind WhatsApp Marketing). Unlike the providers above, we don’t engage these on your behalf — you connect your own account for each one, using your own credentials, under your own contract directly with that provider:
- Stripe — you hold your own Stripe account, linked to your own bank account. Donations go straight from your donor to you; we never receive or hold the funds, and Stripe processes that payment data under your own agreement with Stripe, not ours.
- WhatsApp Business Platform — your messages send from your own verified WhatsApp Business Account, under your own Meta Business Manager.
- Anthropic (Claude) — if you use the AI-assisted WhatsApp replies, they run on your own Anthropic API account and key.
Our software simply uses the credentials you provide to act on your instruction within your own accounts. Because you hold these relationships directly, each provider’s own privacy policy and data processing terms govern that processing — not our Data Processing Agreement. We’d encourage you to check each provider’s own terms if you use these features, in the same way you would for any third-party tool you connect to your organisation’s systems.
Transfers outside the UK
Some of the sub-processors above are based in the United States. Where personal data is transferred outside the UK, we put appropriate safeguards in place with that sub-processor — such as the UK International Data Transfer Addendum or the equivalent Standard Contractual Clauses — before any data is sent. We don’t use a sub-processor unless it’s willing to sign up to those terms.
Questions
If you’re a charity client and want more detail on any of the above — a copy of a specific data processing agreement, or confirmation of a particular safeguard — email us at hello@fundsorted.com.