Cantis Ltd: our suppliers
These are the companies Cantis Ltd uses, or has approved, to handle personal data. Each works only on our instructions under a written data processing agreement. Our privacy notices explain what each category receives. When we add or replace a supplier, we update this page and tell testers by email at least 14 days before the new supplier receives any of their data.
| Supplier | Category | What it does | Where | Safeguard for transfers outside the UK |
|---|---|---|---|---|
| OpenAI | AI provider | Reads drafts and conversation context and suggests changes | United States | UK's approved contract terms (EU standard contractual clauses with the UK Addendum) |
| Amazon Web Services | Server hosting | Hosts the Cantis server | Sweden | Not needed: the UK recognises the EU as giving adequate protection |
| Cloudflare | Network and security | Carries traffic to and from the Cantis server and protects it | United States | UK-US data bridge (UK Extension to the EU-US Data Privacy Framework) |
| Anthropic | Feedback review | Helps us review tester feedback and questionnaire answers | United States | UK's approved contract terms (EU standard contractual clauses with the UK Addendum) |
| Microsoft 365 | The privacy@ and support@cantis.ai mailboxes | United Kingdom | Data stored in the UK. Support access from elsewhere under the UK's approved contract terms | |
| Microsoft Azure | AI provider and server hosting | Approved, not in use yet (see below) | United Kingdom (UK South) | Not needed: in the UK |
Approved, not in use yet: Microsoft Azure. We will email testers at least 14 days before it receives any of their data.
Questions, or a copy of a safeguard: privacy@cantis.ai.