LEGAL
Version 1 · Last updated 1 October 2026. The third parties that help us provide Monty CRM, and what each one does.
This list is maintained under clause 7 of our Data Processing Addendum. When we add or replace a Subprocessor we will update this page and, where required by law, notify customers so they can object.
These providers may process personal data that customers store in Monty CRM. Each is bound by a data processing agreement with us.
Provider | Purpose | Location | Safeguards |
|---|---|---|---|
Hosting of the Monty CRM application and database, and hosting of our own backup server | United Kingdom | Data stays in the UK | |
Cloudflare (Cloudflare, Inc.) | DNS, and the secure proxy, content delivery and security layer that all traffic to Monty CRM and our website passes through. Also provides bot protection (Turnstile) on our sign-up form. | United States, and Cloudflare’s global network of data centres | UK Extension to the EU-US Data Privacy Framework, plus Standard Contractual Clauses and the UK Addendum under the Cloudflare DPA. Certified to ISO/IEC 27001 and ISO/IEC 27701, with SOC 2 Type II. |
SMTP2GO (Sand Dune Mail Limited) | Delivery of transactional email, such as sign-up codes, password links and account notifications | New Zealand | UK adequacy regulations for New Zealand, plus the UK International Data Transfer Addendum in SMTP2GO’s DPA. Certified to ISO/IEC 27001:2022 (information security) and ISO 9001 (quality management). SMTP2GO publishes its own sub-processor list. |
Application error logs and backups are produced and stored on our own infrastructure hosted by CWCS. No separate logging or backup provider receives customer data.
We also use these services for our website, sign-up and billing. They do not have access to the CRM data customers store in Monty CRM. How we use the personal data involved is explained in our Privacy Policy.
Provider | Purpose | Location | Safeguards |
|---|---|---|---|
Subscription billing and card payments. Stripe also acts as an independent controller for its own fraud-prevention and regulatory purposes. | United States and other countries where Stripe operates | UK Extension to the EU-US Data Privacy Framework, plus Standard Contractual Clauses and the UK International Data Transfer Addendum under the Stripe DPA | |
Google (Analytics) | Website analytics | United States | Provider’s data processing terms |
Identifying the businesses that visit our website, from the visitor’s IP address | United Kingdom | Operated by Virtualnet Marketing Ltd, the company behind Monty CRM, so the data is not passed to a third party. See its GDPR statement. |
If you have a question about a provider listed here, please contact us.
Free 15-minute demo
No fluff, just a 15-minute walkthrough.
Tired of hour-long software presentations full of corporate jargon? So are we. We'll jump on Google Meet, show you how MontyCRM keeps your pipelines clean and your team focused, and answer your questions, without the high-pressure sales pitch.
Once booked, you'll get a calendar invite with your Google Meet link.