Section 1
What this list covers
Under Part E of our Platform Terms, a Lawyer using the Platform is the Controller of the personal data in their client matters and Correm is their Processor. Clause E5 obliges Correm to publish and maintain this list and to keep it accurate.
Each party below is engaged under a written contract imposing obligations that provide at least the same level of protection for Lawyer Personal Data as Part E. Correm remains fully liable to the Lawyer for each sub-processor's performance. For how we handle personal data generally, see our Privacy Policy.
Where Correm's AI tooling uses a third-party model provider, that provider appears below and is engaged on terms under which Lawyer Personal Data is not used to train that provider's models and is not retained beyond the period needed to provide the service.
Section 2
Current sub-processors
| Sub-processor | Purpose | Processing location | Transfer safeguard |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud hosting and storage | London region (eu-west-2) | No transfer outside the UK |
| Stripe Payments UK Limited | Payment processing and Lawyer payouts | United Kingdom, with onward transfer to Stripe, Inc. in the United States | UK Addendum to the EU standard contractual clauses |
| Resend, Inc. | Transactional email delivery | United States | UK Addendum to the EU standard contractual clauses |
| PostHog, Inc. | Product analytics and AI observability | European Union (Frankfurt), stored in the EEA, with support access from the United States | UK adequacy regulations, and the UK Addendum to the EU standard contractual clauses for United States support access |
| OpenRouter, Inc. (a Stripe company) | AI model gateway for AI-assisted Lawyer matching, routing at the date of this list to OpenAI, L.L.C. in the United States as model provider | United States | UK Addendum to the EU standard contractual clauses |
| Anthropic PBC | AI model provider for AI-assisted Lawyer matching | United States | UK Addendum to the EU standard contractual clauses |
| Google Ireland Limited | Authentication, calendar scheduling and address lookup | Ireland, with onward transfer to Google LLC in the United States | UK adequacy regulations, and the UK Extension to the EU–US Data Privacy Framework |
| LinkedIn Ireland Unlimited Company | Authentication and Lawyer profile prefill | Ireland, with onward transfer to United States affiliates | UK adequacy regulations, and the UK Extension to the EU–US Data Privacy Framework |
Section 3
Changes to this list
Before adding or replacing a sub-processor, Correm will update this page and notify each Lawyer at the registered email address on their account, in each case at least 10 days in advance.
If you object on reasonable data protection grounds within that period, we will work with you in good faith to find a resolution. If none can be found, you may close your account under clause C6 of the Platform Terms.
Section 4
Contact
Crumb Topco Ltd, trading as Correm. Questions about this list or about Part E: kenzo@correm.ai.