Book a demo

Sub-processor List

Last Update: July 2025

At RoleMapper, we sometimes work with trusted third parties to help us deliver our services. These companies are known as sub-processors. They might handle certain types of data on our behalf so we can run our platform, provide support, or improve performance. 

We only share data when we need to, and only with companies that meet our standards for security, privacy and compliance. Each sub-processor is under a written agreement and must follow UK data protection laws. 

This list shows who we work with, what they help us with, and where they are based. We review it regularly and update it whenever there’s a change. 

If you have any questions, just contact us at security@rolemapper.tech. 

What is a sub-processor? 

A sub-processor is a third party that helps us carry out part of our service. They may process personal data, but only to the extent needed for that service to work.  

We do not allow any sub-processor to use your data for their own purposes. 

Who we work with 

We’re always happy to talk through how we work with our sub-processors, please reach out!

Name 

What they do 

Where they are based 

Type of data processed 

Amazon Web Services 

AWS provides cloud infrastructure and hosting services, including servers, storage, databases, and backup. 

Headquarters in Seattle, Washington, USA.  

Data centres globally, including the UK and EU. 

RoleMapper uses services deployed in the UK region 

Personal data (e.g. names, email addresses, user IDs) 

Business data and HR-related content 

Metadata and system logs 

Files uploaded by customers (if applicable) 

Mircosoft – Office 365 

A suite of productivity tools (Outlook, Teams, Word, Excel, SharePoint, etc.) used by your internal team for day-to-day communication and collaboration 

Headquarters in Redmond, Washington, USA.  

Data for UK and EU customers is typically hosted in Microsoft data centres located in the UK or EU. 

RoleMapper uses services deployed in the UK region 

 

Internal employee data (e.g. names, email addresses, contact details) 

Calendar events and meeting data 

Internal HR, legal, and operational documentation 

Files shared via SharePoint or OneDrive 

Chat logs and call recordings via Microsoft Teams 

 

Microsoft Azure 

Microsoft Azure is a cloud computing platform used by RoleMapper to host and operate parts of its SaaS infrastructure. This includes servers, databases, identity management, APIs and platform services that support the RoleMapper application. 

Microsoft is headquartered in Redmond, Washington, USA. RoleMapper uses Azure data centres based in the UK or EU to host and process customer data in line with UK GDPR requirements. 

RoleMapper uses services deployed in the UK region 

 

Customer personal data (such as names, email addresses and job-related information) 

Application and platform data generated by end users 

Authentication and identity data 

Logs, backups and technical metadata 

System-generated data used for availability, scaling and performance 

 

New Relic 

New Relic is used to monitor the performance, reliability and health of the RoleMapper platform. It helps our team identify technical issues and optimise the system for a smoother user experience. 

Headquarters in San Francisco, California, USA. Data is processed in the EU region. 

Application performance data 

System logs and usage metrics 

Diagnostic information 

May occasionally capture pseudonymised user data or metadata 

No direct access to customer personal data 

 

Atlassian 

Atlassian provides internal tools such as Jira and Confluence, which we use for software development, documentation and internal team collaboration. 

Headquarters in Sydney, Australia. Data may be stored in the EU or USA. 

Internal team data (names, email addresses and comments) 

Project and productdocumentation 

Issue tracking and support requests 

Occasionally may reference customer data in a support context 

 

Cloudflare 

Cloudflare provides security and performance services for the RoleMapper platform. This includes protection against malicious traffic, DDoS attacks, and content delivery through its global network. 

Headquarters in San Francisco, California, USA. Operates a global network of edge locations, including within the UK and EU. 

IP addresses and web traffic metadata 

Security-related logs and performance data 

TLS/SSL certificates 

No direct access to application-level personal data 

 

Full Story 

FullStory helps us understand how users interact with the RoleMapper platform by capturing anonymised session data. This supports product improvements and user experience design. 

Headquarters in Atlanta, Georgia, USA. 

Interaction data (clicks, navigation paths and session flows) 

Pseudonymised or anonymised user IDs 

Visual rendering of non-sensitive user sessions 

May incidentally capture personal data if not masked (we use masking to minimise this) 

 

Story Lane 

Storylane is used to create interactive product demos and training guides, helping customers understand how to use the RoleMapper platform. 

Headquarters in California, USA. 

Interaction and engagement data within demos 

Anonymised or training-specific user flows 

May collect email addresses or usage data if gated or embedded 

No processing of live customer data 

 

RoleMapper
The building blocks of your workforce strategy.

Role Mapper Technologies Ltd
Kings Wharf, Exeter
United Kingdom

© 2025 RoleMapper. All rights reserved.