Skip to main content
Fyling
Create your accountSign in

Draft — not yet reviewed by a lawyer

Sub-processors

These are the providers that handle data when your practice uses Fyling. Companies House and HMRC receive filings that your practice submits under its own presenter account. “Not yet confirmed” means the hosting location is still to be checked before this page is final.

Always used

  • Vercel

    What it does
    Hosts the web app and runs the scheduled jobs.
    Data it sees
    Everything the app handles while it runs, in transit.
    Where
    London (lhr1)

  • Supabase

    What it does
    Stores the database.
    Data it sees
    All stored data. Authentication codes and presenter credentials are encrypted by Fyling before they are stored.
    Where
    London (eu-west-2)

  • Resend

    What it does
    Sends and receives email: invites, reminders, filing results, client emails.
    Data it sees
    Recipient addresses, subjects, message bodies and any file attached.
    Where
    Not yet confirmed

  • Companies House

    What it does
    Receives the filings your practice submits and supplies company data.
    Data it sees
    The filing content and company numbers your practice sends.
    Where
    United Kingdom

  • UK Sanctions List (FCDO)

    What it does
    Public list that names are checked against inside Fyling.
    Data it sees
    Nothing about your clients: Fyling only downloads the list.
    Where
    United Kingdom

Only if your practice turns on the feature

Each of these is used only when the feature is switched on for your practice.

  • HMRC

    What it does
    Receives VAT and other returns your practice submits.
    Data it sees
    The return content and the practice's HMRC authorisation.
    Where
    United Kingdom

  • Google Analytics

    What it does
    Counts visits to the site, for visitors who accept analytics cookies.
    Data it sees
    Pages visited, approximate location, browser and device. No filing or client data.
    Where
    United States and other Google locations

  • Stripe or Paddle (one of them)

    What it does
    Takes the practice's subscription payment.
    Data it sees
    The practice's billing contact and payment details.
    Where
    Not yet confirmed

  • Stripe or GoCardless (one of them)

    What it does
    Takes payment of a practice's invoices from its clients.
    Data it sees
    Invoice amounts and the paying client's contact details.
    Where
    Not yet confirmed

  • Xero, QuickBooks or FreeAgent

    What it does
    Lets a practice pull its clients' accounting data into Fyling.
    Data it sees
    The accounting data the practice chooses to connect.
    Where
    Set by each provider

  • Identity-check provider

    What it does
    Checks a person's identity document, if the practice's setup uses one.
    Data it sees
    The person's identity document and details.
    Where
    Not chosen yet

  • AI document reader

    What it does
    Would read an uploaded ID or bank statement into fields a person then checks.
    Data it sees
    The uploaded document. Not in use today.
    Where
    Not chosen yet