Vendors that process HiBFF data
These are the third-party services HiBFF uses to deliver the platform. Each has been reviewed for GDPR adequacy and signed our Data Processing Agreement. We notify enterprise customers of any change to this list at least 30 days before it takes effect.
| Vendor |
|---|
| MongoDB Atlas Primary database for user accounts, sessions, content EU-West (Ireland) · AWS region eu-west-1 |
| Cloudflare CDN, DDoS protection, edge caching for static assets Global edge network |
| Postmark Transactional email delivery (welcome, password reset, status alerts) United States |
| Twilio SMS for two-factor authentication and crisis-safety phone outreach United States |
| Anthropic (Claude Sonnet 4.5) AI Practice Partner conversation generation United States · processed on Anthropic infrastructure |
| Airwallex Payment processing for HiBFF Plus subscriptions United Kingdom · global processor |
| Google Cloud (Firebase Cloud Messaging) Push notifications to Android app United States |
| Google OAuth Sign-in with Google identity provider United States |
| Capgo Capacitor live updates (Android OTA delivery) European Union |
| GitHub Source code hosting, security advisories, CI runners United States |
International data transfers
Where data crosses jurisdictions (e.g. UK → US), we rely on the UK International Data Transfer Agreement (IDTA) with our US subprocessors, combined with EU Standard Contractual Clauses where applicable. DPA available on request.
Need a signed DPA, vendor questionnaire, or change-notification subscription?
business@hibff.comLast reviewed: 25 April 2026.