Sub-processors

The third parties we use to process customer data on Hyrlo's behalf.

Disclosure version 2026-07-26-support · effective 26 July 2026

Added Crisp as the managed in-app customer-support provider.

Amazon Web Services

Cloud infrastructure, encrypted file storage, and transactional email delivery.

Data categories: Account profile data, Organisation and finance records, Uploaded documents, Email metadata
Primary location: United Kingdom, European Union, and United States (service-dependent)
DPA status: DPA in place
Added to register: 24 July 2026

Hyrlo uses AWS services including S3 for file storage and SES for transactional email.

Subscription billing, hosted checkout, and payment-processing services for paid plans.

Only workspaces using paid plans or payment flows are shared with Stripe.

AI-assisted OCR and document data extraction when the OpenAI OCR provider is enabled.

Only used for document-processing features when the workspace OCR configuration routes documents through OpenAI.

Bot protection and abuse prevention on public signup and similar forms.

Data categories: IP address, Browser and device signals, Form submission metadata
Primary location: Global
DPA status: DPA in place
Added to register: 24 July 2026

Used to verify public form submissions through Turnstile when enabled.

Managed in-app customer support, chat, and support ticket handling.

Data categories: User account identifiers, Organisation identifier, Plan and lifecycle status, User role, Application route and release, Technical request identifier, Support conversation content
Primary location: European Union (France); international transfers under the provider DPA where applicable
DPA status: DPA pending
Added to register: 26 July 2026

The widget loads only after support-chat cookie consent. Hyrlo does not automatically attach financial records or document contents.