Trust center
Subprocessors
The companies that process client and traveler data on our behalf. Clients are given 30 days notice before we add or replace one, and can object.
| Company | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting of the website and client portal, database, file storage, content delivery and privacy-preserving web analytics | Account, user and traveler profile data; trips, requests, approvals and billing records; uploaded documents; sign-in and audit records | United States (global network) |
| Resend, Inc. | Sending transactional email: sign-in links, invitations, confirmations and notifications | Recipient name and email address and the content of the message | United States |
| Google LLC (Google Workspace) | Staff email and documents used by the travel team | Correspondence with clients and travelers, and itineraries or documents sent by email | United States |
| Global distribution systems and booking tools used to search, book and ticket travel | Searching, booking, ticketing and changing travel | Traveler name, contact details, date of birth, travel document details where the supplier requires them, itinerary, loyalty numbers and payment details passed to the supplier | United States and worldwide |
| Airlines, hotels, rail and car rental companies | Providing the travel booked | The traveler details each supplier needs for the booking, including any travel document details the destination requires | Worldwide, depending on the trip |
Travel suppliers act on their own terms when they provide the travel booked: an airline is responsible for the passenger data it collects for a flight. We pass them only what each booking needs. Each subprocessor's security documentation is reviewed before we use it and again every year.
To keep a copy, use your browser's Print → Save as PDF. Navigation and banners are left out of the printout.