Sub-processors
Last updated 24 October 2026. Oblifee Ltd, company number 17537669, 66 Paul Street, London, EC2A 4NA (and, for contracts made before 1 January 2027, LataSys Limited).
These are the companies that process data on our behalf to run Oblifee. For each one we say what it does, which data it sees and where it runs. Your stored data (data at rest) is held in Microsoft Azure in the United Kingdom. Some processing happens elsewhere, and this page says where. Our aim, as Oblifee grows, is to hold each customer's data in its own territory. Enterprise customers can ask about UK-only processing.
Current list
| Sub-processor | What it does for us | Data it processes | Where |
|---|---|---|---|
| Microsoft Azure: hosting, database, storage, security (Microsoft) | Runs the platform; stores your workspace data, documents and backups; scans uploads for malware | All customer data, user account details, audit logs | United Kingdom (UK South) |
| Microsoft Azure AI Foundry and Azure AI Vision, UK-only processing (Microsoft) | Obli documentation search; commodity code search (embeddings); reading text on labels (OCR) | The search words Obli forms from a question; what you type in commodity code search and, if you allow it, product details; label artwork | United Kingdom (UK South). These requests are processed only in UK South. |
| Microsoft Azure AI Foundry, Global Standard tier (Microsoft) | The Obli conversation; reading documents (formula forms, safety data sheets, imports); understanding images and artwork; the label reader and label design check; ranking commodity code results | The question and tool results; document content; product images and artwork; generated label designs | Resource in UK South, where anything stored stays. Microsoft may process each request in any Azure region it chooses. |
| Microsoft Azure AI Foundry, image generation (Microsoft) | Generating label images and the showcase view | Label text and artwork | Resource in Sweden Central, Global Standard tier, so requests may be processed in any Azure region. No image generation model is offered in UK South. |
| Anthropic (Claude API) | Answers Obli questions only when the Azure models have failed | The question and the results of the tools Obli used. Never uploaded documents. | United States, on Anthropic's infrastructure |
| Microsoft Azure Communication Services (Microsoft) | Sends invitations, alerts and service email | Recipient name and email address, message content | Europe |
| Microsoft Azure Application Insights (Microsoft) | Error and performance monitoring | Technical telemetry, which can include user identifiers and IP addresses | United Kingdom (UK South) |
| Microsoft Entra External ID (Microsoft); Google, only if you choose Google sign-in | Sign-in. We never see or store your password. | Name, email address, sign-in identifiers | Microsoft: Europe; Google: as set by Google |
| Microsoft Azure Bot Service (Microsoft) | Carries Obli conversations in Microsoft Teams and Microsoft 365 Copilot | Messages, Microsoft 365 user and tenant identifiers | West Europe |
| Stripe | Card and direct debit payments, invoices, VAT calculation | Billing contact details, payment details (held by Stripe, never by us), invoice data | European Union and United States |
| PostHog (EU cloud) | Product analytics, so we can see how the app is used and improve it. Session replay only where switched on, with content masked. | Usage events, pseudonymous user identifiers | European Union |
| Zoho Desk (EU data centre) | Help centre, chat and support tickets | Name, email address and what you write to us | European Union |
| Google Analytics | Measures visits to oblifee.com, only if you accept the analytics cookie | Website usage, device and approximate location | European Union and United States |
Transfers outside the UK and EEA
Where a sub-processor processes personal data outside the UK or the European Economic Area (for example Anthropic in the United States), we rely on an adequacy decision or on the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses, as set out in Schedule 1 of the Standard Terms of Business.
AI models and your data
All the Microsoft AI resources above are in our own Azure tenancy. Microsoft does not use these requests to train models. We do not use your data to train AI models, and our model providers' terms do not allow them to use it to train theirs. Product photo background removal runs on our own model in our own hosting, with no third-party AI service.
How we tell you about changes
Before we add or replace a sub-processor, we email your workspace administrators and show a notice in the app at least 30 days ahead, and update this page with a new date. If you have a reasonable data protection objection, tell us within that period; if we cannot offer an alternative, you may end the affected service and we refund what you prepaid for the unused period (clause 18.4 and Schedule 1 of the Standard Terms of Business).
Questions
Email support@oblifee.com. To report a security concern, email security@oblifee.com.