Sub-processor List
This list identifies the third-party sub-processors engaged by OrdoLux in the provision of the Services, as referenced in the Data Protection Addendum. OrdoLux ensures that all sub-processors are engaged under written contracts containing materially the same data protection obligations as those set out in the Data Protection Addendum.
OrdoLux will provide Customers with at least 30 days' notice of any addition or replacement of a sub-processor, in accordance with paragraph 5 of the Data Protection Addendum. Customers may exercise their rights under that paragraph in respect of any proposed change.
Infrastructure sub-processors
These sub-processors host, store, or process OrdoLux application data.
| Sub-processor | Role | Location | Transfer safeguard |
| Base44 (Wix.com) | Application hosting, managed backend infrastructure, data storage, authentication, secrets management | United States | UK IDTA / UK Addendum to EU SCCs |
| Google Cloud (via Base44) | Underlying cloud infrastructure for OrdoLux application data | United States | UK IDTA / UK Addendum to EU SCCs |
| Microsoft (Microsoft 365 / Azure) | Customer document storage (SharePoint), email integration, calendar integration, single sign-on | United Kingdom (Customer's own tenancy) | No international transfer; data remains in Customer's UK tenancy |
Service sub-processors
These sub-processors provide specific functionality within OrdoLux that involves processing Customer or client Personal Data.
| Sub-processor | Role | Location | Transfer safeguard |
| Stripe Payments UK | Card payment processing for client invoices generated through OrdoLux | United Kingdom / Ireland | No international transfer required for UK/Ireland processing |
| Checkboard | Know Your Customer (KYC) and Anti-Money Laundering (AML) identity verification for matter onboarding | United Kingdom | No international transfer required |
| TM Group | Property search ordering and results delivery for conveyancing matters | United Kingdom | No international transfer required |
| OpenAI | AI assistant (OrdoLux "Cas") processing of matter text for drafting assistance and analysis. Each Customer may use its own OpenAI API key, under which the Customer contracts directly with OpenAI. OrdoLux facilitates the data transfer. | United States | UK IDTA / UK Addendum to EU SCCs |
Platform sub-processors (Base44)
Base44, as OrdoLux's hosting platform, maintains its own sub-processor directory for vendors that handle platform-level data. The current list is available at the Base44 Security Overview and can be provided on request.
Changes to this list
OrdoLux updates this list when sub-processors are added, removed, or their roles change. Material changes are communicated to Customers in accordance with the Data Protection Addendum. To receive notifications of changes, or to object to a new sub-processor under paragraph 5 of the Data Protection Addendum, please contact avi.gordon@ordolux.co.uk.