The following third parties process personal data on behalf of Noor customers. Each has a signed Data Processing Agreement under UK GDPR. Any addition or material change is notified in writing to customer firms 30 days before it takes effect on their tenant.
Party
Purpose
Location
DPA
AnthropicZDR
LLM — translation + document OCR (Claude Sonnet 4.5)
UK / EU
Signed · v3.2
AWS
Document and voice-note storage
eu-west-2 (London)
Signed · v4.1
Convex
Application database and real-time sync
eu-west-2
Signed · v1.9
Meta (WhatsApp Business)
Messaging channel — inbound + outbound WhatsApp
EU
Signed · v5.0
Resend
Transactional email (morning digest, notifications)
EU
Signed · v1.2
ZDR = Zero Data Retention. The sub-processor contractually agrees not to retain or train on the data after it has been processed for the immediate request.