Subprocessors and Hosting Provider Terms
Last updated: 30-SEPT-2026; Version: 1.0
This page lists the third parties ("Subprocessors") that Cooper Software Ltd may engage to process personal data on behalf of its clients under the Data Processing Addendum in Schedule Part 1 of our Terms and Conditions for the Provision of Services, and the third-party terms that apply where we provide Hosting Services under our Hosting Terms. We will give clients not less than thirty (30) days' notice before adding or replacing a Subprocessor. To receive notifications of changes, e-mail privacy@coopersoftware.com with the subject "Subprocessor updates".
1. Subprocessors
|
Subprocessor (legal entity) |
Service / purpose |
Personal data processed |
Processing location |
Transfer safeguard |
Further information |
|
Oracle Corporation UK Limited (Oracle Cloud Infrastructure) |
Infrastructure hosting of client environments where OCI is the Hosting Provider; backups |
All data held in the client's hosted environment |
United Kingdom (UK South – London; UK West – Newport) |
Data hosted in the UK. Oracle support access from outside the UK under Oracle's Data Processing Agreement (IDTA / UK Addendum to SCCs) |
Oracle Data Processing Agreement and Hosting & Delivery Policies: https://www.oracle.com/corporate/contracts/cloud-services/ |
|
Microsoft Ireland Operations Limited (Microsoft Azure) |
Infrastructure hosting where Azure is the Hosting Provider; backups |
All data held in the client's hosted environment |
United Kingdom (UK South; UK West) |
Microsoft Products and Services Data Protection Addendum (IDTA / UK Addendum; EU Data Boundary) |
Microsoft DPA: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA |
|
Microsoft Ireland Operations Limited (Microsoft 365) |
E-mail, Teams and SharePoint used to deliver consultancy and support services |
Support correspondence and files shared by clients |
United Kingdom / European Economic Area |
Microsoft Products and Services Data Protection Addendum |
As above |
|
Logging and management of support tickets (service desk / ticketing platform) |
Ticket content and attachments, requester and agent names, e-mail addresses and contact details |
United States (Amazon Web Services) |
Data at rest in the EEA (UK adequacy regulations). Kani Technologies Inc. is a US company; access from the US is under Desk365's Data Processing Agreement (UK Addendum to SCCs / IDTA) |
Desk365 Data Processing Agreement: https://www.desk365.io/dpa/ Desk365 Privacy Policy (including sub-processors): https://www.desk365.io/privacy-policy/ GDPR and data location: https://help.desk365.io/en/articles/gdpr-compliance/ Desk365 Sub-processors: https://www.desk365.io/sub-processors/ |
|
|
Approved associate consultants |
Delivery of consultancy services under our supervision |
As required for the engagement |
Various |
Transfer Risk Assessments |
Named associates available on request |
2. Hosting Provider Terms
Where we provide Hosting Services, the following third-party terms apply to the client's use of the hosted environment (see the definition of "Hosting Provider Terms" and paragraph 6.1 of our Hosting Terms). The version in force from time to time applies.
|
Hosting Provider |
Terms |
Link |
|
Oracle Cloud Infrastructure |
Oracle Cloud Services contracts, including the Oracle Cloud Hosting and Delivery Policies and the acceptable use terms |
https://www.oracle.com/corporate/contracts/cloud-services/ |
|
Microsoft Azure |
Microsoft Product Terms for Azure, Universal License Terms for Online Services and the Acceptable Use Policy |
https://www.microsoft.com/licensing/terms/ |
3. Changes
We will update this page at least thirty (30) days before engaging a new or replacement Subprocessor and will notify clients who have registered for updates. A client may object on reasonable data protection grounds within that period, as set out in paragraph 5.1 of the Data Processing Addendum.
Previous Versions
None