Subprocessors.
The companies that store or process your firm’s data when you use the Clava cloud.
Last updated 19 October 2026
Current subprocessors
| Company | What it does | Location |
|---|---|---|
| Amazon Web Services (AWS EMEA SARL) | Hosting, database, file storage, backups, encryption keys, and AI models (open-source and Anthropic) | London, UK (eu-west-2) |
| Microsoft Azure (Microsoft Ireland Operations Ltd) | AI models (OpenAI and Mistral) | UK and EU regions |
Anthropic, Mistral and OpenAI develop some of the models Clava uses, but they are not subprocessors: their models run on AWS and Microsoft Azure, and your data is never sent to them.
If your firm connects Microsoft 365, Google Workspace or another of its own systems, data moves between your firm’s account and Clava on your firm’s instruction. Those services are your firm’s own, not Clava’s subprocessors.
Changes
We give at least 30 days’ notice before adding or replacing a subprocessor, or changing where your data is processed. Your firm may object in writing. If we can’t resolve the objection, your firm may terminate without penalty and receive its data and a certificate of destruction.
To be told of changes, email ben.gordon@clava.uk.
Questions from your security team?
Send us your questionnaire. We’ll answer it and share anything marked on request.