01The list
| Sub-processor | What it does for us | Where | Safeguard |
|---|---|---|---|
| Croft.so | Runs the application servers, the database and encrypted backups. | Region to be confirmed before launch. | Data processing terms with Croft.so; to be finalised before launch. |
| Microsoft Ireland Operations Ltd | Sends transactional email (verification, invitations, reminders, briefing requests) through Microsoft 365, from our own mailbox. | United Kingdom and European Union data centres. | Microsoft Products and Services Data Protection Addendum; UK adequacy for EU. |
| Stripe Payments UK Ltd, with Stripe Inc. | Takes card payments, issues invoices and stores billing details. We never see card numbers. | United Kingdom, European Union and United States. | Stripe Data Processing Agreement; UK International Data Transfer Addendum to the EU SCCs for US processing. |
That is the whole list. There is no analytics vendor, no advertising network, no customer-messaging platform and no AI service. Server logs stay on our own servers.
02Why it is short
Every extra company is another place your volunteers’ names can end up and another contract for a treasurer to read. Muster is built to need very little: a database, a way to send email and a way to take payment. Where we could do something ourselves instead of adding a vendor — hosting the fonts, generating the PDFs, rendering the emails — we did.
03How we tell you about changes
Under the data processing agreement we give at least 30 days’ notice by email to every organisation’s owners and administrators before adding or replacing a sub-processor, and we update this page on the same day. If you object on reasonable data protection grounds and we cannot resolve it, you may end the agreement and we refund the unused period. Questions to [email protected].