This page lists the third parties Superfast IT engages as Sub-processors to deliver its Services. It is referenced from the Master Services Agreement (clause 13.6) and from every Order Form. The Sub-processor List in force at the date of any Order Form forms part of that Order Form by reference.
Superfast IT may add, replace or remove Sub-processors from this list from time to time. We will notify Clients of any intended changes with reasonable notice and a fair opportunity to object on data protection grounds. Clients may subscribe to change notifications by emailing *[email protected].*
Last updated: 10 June 2026
Version: 1.1
| Sub-processor | Service provided to Superfast IT | Used to deliver | Country of processing | DPA in place |
|---|---|---|---|---|
| Microsoft Corporation | Microsoft 365 tenant hosting, Entra ID, Intune, Azure-hosted management tooling | All Services involving Microsoft 365 and Azure | UK / EU | Yes |
| Halo Service Solutions Ltd | Professional services automation, ticketing, client portal | All Services | UK | Yes |
| ConnectWise | Remote monitoring and management (RMM), endpoint detection and response (SentinelOne MDR delivered through ConnectWise), and email backup (ConnectWise SaaS Backup) | Superfast IT Support, Cyber Security Services, email backup | US (UK Addendum in place) | Yes |
| Qualys, Inc. | Vulnerability scanning and reporting | Cyber Security Services | EU | Yes |
| Kaseya (IT Glue) | IT documentation and asset management | All Services | UK / EU | Yes |
| Cisco Umbrella | DNS security filtering | Cyber Security Services (where contracted) | EU | Yes |
| Duo Security (Cisco) | Multi-factor authentication for Clients who subscribe to it (not used for Superfast IT internal systems) | MFA service where contracted | EU | Yes |
Superfast IT will provide written notice of any intended addition or replacement of a Sub-processor with at least thirty (30) days' notice before the change takes effect, in line with clause 13.6 of the Master Services Agreement.
The Client may object to a proposed change within fifteen (15) Business Days of notice on reasonable data protection grounds. Where the Client raises a reasonable objection that cannot be resolved, the Client may terminate the affected Services without penalty on the date the change is due to take effect.
| Date | Change | Reason |
|---|---|---|
| 10 Jun 2026 | Initial published list with named Sub-processors: Microsoft Corporation, Halo Service Solutions Ltd, ConnectWise (RMM, SentinelOne MDR, SaaS Backup), Qualys Inc., Kaseya (IT Glue), Cisco Umbrella, Duo Security (Cisco) | Replaces v1.0 draft which carried placeholder rows for RMM, EDR, Backup, SIEM/SOC, Vulnerability scanning and Documentation providers |
Questions or objections about Sub-processors should be sent to [email protected].