Sub-processor policy
Last updated: 13th November, 2025
To ensure the provision of our Services, we may engage and use data processors with access to certain Customer Data or Personal Information (each, a “Subprocessor”). This page provides information about each Subprocessor.
Please email support@participantkit.com if you have any questions.
Data categories
Participant Kit has two categories of data.
- Customer: Is defined as being a Participant Kit user, a customer. A person who has an log-in to Participant Kit. For example a researcher or research ops person.
- Participant: Is defined as a person who the User or User’s Organisation is doing research with. Participant data is collected and managed by the User.
Participant sub-processors
A list of the sub-processors that we use to process and store Participant data.
Application
Sub-processors that store and process Participant data in the application.
| Name | Purpose | Data processed | Processing location |
|---|---|---|---|
| Heroku | Host our application and data stores Manage SSL |
Research data |
EU 🇪🇺 or USA 🇺🇸
|
| AWS | Secure storage for uploaded consent | Files |
EU 🇪🇺
|
| Sparkpost | Email provider - Application emails | Name, Email address |
EU 🇪🇺
|
| Postmark | Email provider - Application emails (US alternative) |
Name, Email address |
USA 🇺🇸
|
| Mailgun | Email provider - Bulk emails sent to participants | Name, Email address |
EU 🇪🇺
|
Customer sub-processors
A list of the sub-processors that we use to process and store Customer data.
These services do not hold participant data unless outlined above.
Application
Sub-processors that store and process Customer data in the application.
| Name | Purpose | Data processed | Processing location |
|---|---|---|---|
| Heroku | Host our application and data stores Manage SSL |
Application data |
EU 🇪🇺 or USA 🇺🇸
|
| AWS | CDN and customer logos | Files |
EU 🇪🇺
|
| Postmark | Email provider - Application emails | Name, Email address |
USA 🇺🇸
|
| Sparkpost | Email provider - Application emails (EU alternative to Postmark) |
Name, Email address |
EU 🇪🇺
|
| Stripe | Payment processor | Payment details |
UK 🇬🇧
|
| AppSignal 1 | Monitoring and error tracking | Name, Email address |
EU 🇪🇺
|
| Segment | Data management and analytics | Name, Email address |
USA 🇺🇸
|
| Mixpanel | Product analytics. (Data received from Segment) |
See Segment data |
EU 🇪🇺
|
| Intercom 2 | Customer support | Name, Email address |
USA 🇺🇸
|
| Userlist 3 | Promotional email delivery | Name, Email address |
USA 🇺🇸
|
- Sometimes data is processed to help troubleshoot support issues.
- Only processed when support is contacted.
- Only is you have subscribed to our newsletter. Newsletter and onboarding emails can be opted out of
We may transfer personal data outside the UK and EEA. When we do, we rely on safeguards including the UK’s adequacy regulations, the 2021 EU Commission Standard Contractual Clauses with the UK International Data Transfer Addendum, and the EU-US Data Privacy Framework where the sub-processor is certified.
We do not, and will never sell any data to third parties.
We never contact your participants directly.
Get help
Can't find what you are looking for?