Current sub-processors
| Provider | What it does for us | Data it receives | Where it operates |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, security and networking for our websites and products. Workers, D1, KV, Durable Objects, Analytics Engine and R2 storage. AI Gateway, Workers AI, Turnstile, Web Analytics and Access (staff sign-in) | Technical data about requests (such as IP address and pages requested); product account data and client content; Umbrella Connect connection records and encrypted refresh tokens; reporting figures derived from Google data; requests sent to AI models and data providers | A global network, including the United States and other countries. Our Umbrella Connect database is set to prefer Oceania, which Cloudflare treats as a hint |
| Google LLC | A Google Cloud project for our sign-in app and monitoring. The Google APIs a client authorises: Search Console, Analytics, Ads and Tag Manager | The connecting account's ID and email; requests to the Google APIs and their responses; error and usage metrics for monitoring | Google's global infrastructure, including the United States |
| Anthropic, PBC | AI models for SiteBeacon's AI features, called through Cloudflare AI Gateway | The content of AI requests: business details, text from a client's pages, the user's instructions and, where a client has connected Search Console, search query and page figures; the model's reply | Outside Australia, on the provider's own infrastructure |
| DataForSEO | Keyword search volume, cost-per-click and difficulty figures, called through Cloudflare AI Gateway | Keyword phrases, which can include phrases from a client's Search Console queries, and a location. No account details, email addresses or tokens | Outside Australia, on the provider's own infrastructure |
| SMTP2GO | Delivery of transactional email: website enquiry emails, Umbrella Connect invitations and SiteBeacon service messages | Recipient name and email address and the content of the message | Data centres in Australia, the United States and Europe |
| Microsoft Corporation | Staff email and documents (Microsoft 365) and staff identity (Microsoft Entra) used to sign in to our staff consoles | Staff names, email addresses and sign-in records, and our correspondence with clients | Microsoft data centres in several countries. Where our data is stored depends on how our Microsoft 365 service is set up |
We choose these providers carefully and share with each only the data it needs for its role.
How to follow changes
To be told when we add or replace a sub-processor, email privacy@umbrellatech.com.au with the subject "Subscribe to sub-processor changes". We will add you to the list and email you at least 30 days before a change takes effect. Anyone can unsubscribe by replying.
Change log
| Date | Change |
|---|---|
| 31 October 2026 | First published |
What changed
- Version 1.0, 31 October 2026: first published.
Contact us
- Business: Umbrella Technologies Pty Ltd (ABN 15 701 061 243)
- Location: Osborne Park, Perth WA 6017 (by appointment)
- Privacy email: privacy@umbrellatech.com.au
- Support email: support@umbrellatech.com.au
- Phone: 1800 262 262