Trust & Security

Sub-Processors

Every third-party service that processes customer data on the platform's behalf is listed here, with the categories of data it sees. Clients with specific residency or regulatory requirements should review the list before onboarding.

Data controller

Property Portfolio Suite Limited · Company No. 17411633 · Registered in England and Wales · Registered office 66 Paul Street, London, EC2A 4NA, United Kingdom.

Enquiries: support@propertyportfoliosuite.com

Last updated: 13 May 2026.

MongoDB

Primary application database

Data: All customer records, encrypted sensitive fields, audit log

Region: Same as application host

Emergent

Cloud hosting & application runtime

Data: All application data and customer files

Region: EU / UK aligned datacentres

Gmail SMTP (transitional)

Transactional email delivery

Data: Recipient email address, message subject and body

Region: Operated by Google. Migration to Resend / Postmark is on the roadmap.

Twilio

WhatsApp notification delivery

Data: Recipient phone number, message body

Region: United Kingdom

Google (Gemini) - onboarding only

Optional text extraction from documents during the initial set-up.

Data: Only documents the client explicitly uploads to the onboarding flow for extraction. Not used anywhere else in the platform, and never invoked after onboarding is complete.

Region: Per Google's published regional commitments. Can be disabled at the client's request before onboarding begins.

fal.ai - onboarding only

Optional image upscaling for property photos during the initial set-up.

Data: Only photos the client explicitly uploads to the onboarding flow for upscaling. Not used anywhere else in the platform, and never invoked after onboarding is complete.

Region: Per fal.ai's published commitments. Can be disabled at the client's request before onboarding begins.

Customers will be notified by email at least 30 days before any new sub-processor is added, with the right to object. Sub-processors are required to maintain at least the same level of data protection as committed in our DPA.

Cookie Notice

We use only strictly necessary cookies to keep you signed in and protect your account. No advertising, no tracking, no third-party analytics.

Privacy Policy