Hyrlo’s application servers, database and file storage run on Vexon Group Ltd’s own infrastructure in the UK. The five services below are the only third parties that process customer data.
Added WorkOS, which provides single sign-on for workspaces that turn it on.
Amazon Web Services (Amazon SES)
Transactional email delivery: sign-in and verification links, notifications, and invoices and reminders sent to your clients.- Data
- Email addresses, Email content
- Primary location
- United States (us-east-1)
- Data processing agreement
- DPA in place
- Added to register
- 24 July 2026
Hyrlo uses AWS services including S3 for file storage and SES for transactional email.
Stripe
Subscription billing, hosted checkout, and payment-processing services for paid plans.- Data
- Billing contacts, Subscription records, Payment metadata
- Primary location
- United Kingdom, European Union, and United States
- Data processing agreement
- DPA in place
- Added to register
- 24 July 2026
Only workspaces using paid plans or payment flows are shared with Stripe.
OpenAI
AI-assisted OCR and document data extraction when the OpenAI OCR provider is enabled.- Data
- Uploaded documents, Extracted receipt or invoice fields
- Primary location
- United States
- Data processing agreement
- DPA in place
- Added to register
- 24 July 2026
Only used for document-processing features when the workspace OCR configuration routes documents through OpenAI.
Cloudflare
Bot protection and abuse prevention on public signup and similar forms.- Data
- IP address, Browser and device signals, Form submission metadata
- Primary location
- Global
- Data processing agreement
- DPA in place
- Added to register
- 24 July 2026
Used to verify public form submissions through Turnstile when enabled.
WorkOS
Single sign-on (SAML and OIDC) for workspaces that turn it on.- Data
- Names, Email addresses, Identity-provider profile attributes
- Primary location
- United States
- Data processing agreement
- DPA in place
- Added to register
- 7 October 2026
Only used when a workspace's owner turns on single sign-on (Business plan). Transfers from the UK rely on the Standard Contractual Clauses with the UK International Data Transfer Addendum, under WorkOS's data processing addendum.