When cowX runs a campaign for a client, we process personal data on that client’s behalf, as their processor. A sub-processor is a third-party service we use for that work that holds or handles that personal data.
We have written data protection terms in place with each sub-processor listed below. Where personal data is transferred outside the UK, the transfer is covered by UK adequacy regulations or appropriate safeguards under UK data protection law.
Current sub-processors
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Google Cloud EMEA Limited (Google Workspace) | Email, file storage, documents and spreadsheets, and AI-based research | Global, including the United States | Standard Contractual Clauses with UK terms, in Google’s Cloud Data Processing Addendum |
| Anthropic Ireland, Limited (Claude) | AI research, analysis and drafting | United States | Standard Contractual Clauses with the UK Addendum, in Anthropic’s Data Processing Addendum |
| Foo Monk LLC (Instantly) | Email sending and mailbox warm-up | United States | UK International Data Transfer Addendum to the EU Standard Contractual Clauses |
| GBD Software as a Service Private Limited Company (MillionVerifier) | Email address verification | European Union (Hungary and Sweden) | UK adequacy regulations (European Economic Area) |
What this list does not include
This list does not include systems that belong to our clients and that they give us access to, such as the mailbox on their domain, their calendar and their scheduling tool. These are the client’s own systems, not our sub-processors.
It also does not include services we use only to run our own business, such as payments, accounting and website hosting. These are described in our privacy policy.
Changes to this list
We email every client at least seven days before we add or replace a sub-processor, with a link to this page. A client may object to a new sub-processor on reasonable data protection grounds within those seven days, as set out in our agreement with them.
When we stop using a sub-processor, we remove it from this page and make sure any client personal data it holds is deleted or returned.
Change log
| Date | Change |
|---|---|
| 16 October 2026 | First version of this list published. |
Questions
If you have any questions about this list or how cowX handles personal data, email ed@cowxsales.com or read our privacy policy.