Trust centre · Sub-processors
Sub-processors
Every provider that handles client data when we host Covenant Desk platform for you: what it does, what it can see, where it runs, and when it applies. As a client you remain the data user for your borrowers' personal data; these providers act for us, under our instructions, to run the service.
Section one
Providers that handle client data
These providers process data on our behalf when we host Covenant Desk platform for you. The list covers our hosted service; a deployment in your own cloud or data centre uses your providers instead.
| Provider | What it does | What it can see | Where | When it applies |
|---|---|---|---|---|
| DigitalOcean | Runs the application and its scheduled jobs | Everything that passes through the application while it is processed | Singapore | Always |
| Neon (on Amazon Web Services) | The PostgreSQL database and its backups | Borrower, loan, document and audit records, encrypted at rest | Singapore | Always |
| Cloudflare | Network edge in front of the application, through DigitalOcean | Traffic in transit, encrypted with TLS | Global edge network | Always |
| The AI model provider you choose | Runs the staff assistant and drafting tools. You pick the provider and model for your deployment | The question and the record extract it needs, with HKID numbers, phone numbers and names masked first | Where your chosen provider runs it | Only while AI is switched on. You can switch AI off at any time |
| Google reCAPTCHA | Screens automated sign-in and form attempts | IP address and browser signals of the person signing in | Global | On sign-in and public forms |
| Our mail host | Sends notification and password-reset email | Recipient address and the message | Singapore | When the system sends email |
| Meta (WhatsApp Business) | Carries WhatsApp intake and screening messages | Messages exchanged with your borrowers on your WhatsApp Business number | Global | Only if you connect WhatsApp |
| AML screening data provider | Name screening against sanctions, PEP and adverse-media data | The names and identifying details being screened | Hong Kong | Only if you use screening. Named in our security pack, shared under NDA |
| Stripe | Bills your Covenant Desk subscription | Your billing contact and payment details. No borrower data | Global | For subscription billing only |
Section two
What is not on this list
Some systems touch your data but are yours, not ours. You choose them and hold the contract.
Your SMS gateway
Reminders go out through the SMS account you connect. Its terms are between you and that provider.
Your existing loan system
When Covenant Desk reads from Softmedia or another system, it uses your own login to a system you already run.
Your bank
Repayments move through your own bank account and FPS details. Covenant Desk never holds or moves funds.
Your mailbox
Email intake reads the mailbox you connect, under your own email provider.
Section three
Changes to this list
We update this page before a new provider starts handling client data, and tell each client's account administrator by email. Questions about any provider: [email protected]. Our hosting providers' certifications are listed on the security page.