Hyrlo’s application servers, database and file storage run on Vexon Group Ltd’s own infrastructure in the UK. The five services below are the only third parties that process customer data.
Added Crisp as the managed in-app customer-support provider.
Amazon Web Services
Cloud infrastructure, encrypted file storage, and transactional email delivery.- Data
- Account profile data, Organisation and finance records, Uploaded documents, Email metadata
- Primary location
- United Kingdom, European Union, and United States (service-dependent)
- Data processing agreement
- DPA in place
- Added to register
- 24 July 2026
Hyrlo uses AWS services including S3 for file storage and SES for transactional email.
Stripe
Subscription billing, hosted checkout, and payment-processing services for paid plans.- Data
- Billing contacts, Subscription records, Payment metadata
- Primary location
- United Kingdom, European Union, and United States
- Data processing agreement
- DPA in place
- Added to register
- 24 July 2026
Only workspaces using paid plans or payment flows are shared with Stripe.
OpenAI
AI-assisted OCR and document data extraction when the OpenAI OCR provider is enabled.- Data
- Uploaded documents, Extracted receipt or invoice fields
- Primary location
- United States
- Data processing agreement
- DPA in place
- Added to register
- 24 July 2026
Only used for document-processing features when the workspace OCR configuration routes documents through OpenAI.
Cloudflare
Bot protection and abuse prevention on public signup and similar forms.- Data
- IP address, Browser and device signals, Form submission metadata
- Primary location
- Global
- Data processing agreement
- DPA in place
- Added to register
- 24 July 2026
Used to verify public form submissions through Turnstile when enabled.
Crisp
Managed in-app customer support, chat, and support ticket handling.- Data
- User account identifiers, Organisation identifier, Plan and lifecycle status, User role, Application route and release, Technical request identifier, Support conversation content
- Primary location
- European Union (France); international transfers under the provider DPA where applicable
- Data processing agreement
- DPA pending
- Added to register
- 26 July 2026
The widget loads only after support-chat cookie consent. Hyrlo does not automatically attach financial records or document contents.