Data protection

Sub-processors.

Who else touches your data, and where.

The third parties that process personal data on our behalf to deliver Cobalt ERP, what each one does, and where it does it.

Last updated: 26 August 2026
This document is a working draft. It describes how Cobalt ERP intends to operate and has not yet been reviewed by a solicitor. Items marked [to be completed] need facts only Cobalt ERP holds. Do not rely on it as a contract until it is signed off.

What a sub-processor is

A sub-processor is a third party that processes personal data on our behalf in order to deliver the Cobalt ERP service. Under the data processing agreement we publish the current list here and give notice before it changes.

The current list

[to be completed]

This list must be completed before Cobalt ERP processes customer data. It needs to name every provider, what each one does, where it processes data, and the transfer mechanism where that is outside the UK or EEA. Publishing an incomplete list is a transparency failure under UK GDPR, so this page is deliberately marked rather than filled with plausible guesses.

The one provider we can state today is the host of this marketing website, Netlify (static hosting and CDN for cobalterp.com), which processes server log data including IP addresses. Everything behind app.cobalterp.com — hosting, database, email delivery, payment processing and any model provider — needs to be listed by Cobalt ERP before this page is published as complete.

Changes and objections

We will give notice before adding or replacing a sub-processor. If you object on reasonable data protection grounds, tell us at support@cobalterp.com and we will work with you to find a solution or, failing that, you may terminate the affected part of the service.

Questions about any of this?

Email us and a person will answer. We would rather explain a clause than have you guess at it.

Talk to us
support@cobalterp.com