CubeCRM is in early access: being demonstrated now and used internally, with full launch in early 2027. Register your interest for pricing and a demo.

Legal

Sub-processors

The third parties that process data on our behalf when your organisation uses CubeCRM, what each one does, and where.

  • Updated 30/09/2026
  • 3 min read
  • For customers

The short version

  • A short, named list

    Every provider is named, with the job it does and the data it touches. No catch-all categories.

  • UK only

    Hosted in the UK on Amazon Web Services (AWS). Servers, databases, backups, file storage and system email all stay in the UK.

  • 30 days’ notice

    Customers are told by email before a sub-processor is added or replaced, and can object before it takes effect.

  • Your integrations are yours

    Services you connect, such as your email, accounting package or phone system, are your own suppliers rather than ours.

A summary for convenience. The full text below is what applies.

1. Current sub-processors

A sub-processor is a third party that processes personal data on our behalf while we provide CubeCRM to you. Each one below works under a written contract that imposes data protection obligations equivalent to those in our data processing agreement with you, and we remain responsible to you for their work. This list forms part of that agreement, which is included in every customer agreement.

  • Amazon Web Services

    Amazon Web Services EMEA SARL

    United Kingdom

    Hosts CubeCRM: application servers, databases, file storage (including uploaded files and attachments in Amazon S3) and backups. Also delivers system email such as invitations, notifications and password resets (Amazon SES).

    Data processed
    All customer data held in CubeCRM, including files and attachments, and recipient email addresses and message content for system email.
    Transfer safeguard
    None needed. Stored and processed in the UK.

2. Services you connect

These are not sub-processors. When you connect one, data passes between it and CubeCRM at your direction, and you have your own agreement with that provider.

Services an organisation can connect to CubeCRM
ServiceWhat the connection is used for
Microsoft 365Syncing Outlook email, calendars and contacts both ways, filing email against the customer record, and single sign-on through Entra ID.
Google WorkspaceSyncing Gmail, Google Calendar and Google Contacts both ways, filing email against the customer record, and single sign-on with Google accounts.
XeroKeeping customers, won quotes and invoices in step with your ledger, and reading balances and payment status back to the customer record.
SageSharing customers, won quotes and invoice history with Sage, and reading account balances back for the sales team.
QuickBooksSharing customers, accepted quotes and invoice history with QuickBooks Online, and reading balances back.
MailchimpSending segments to Mailchimp as audiences and tags, and reading opens, clicks and unsubscribes back to each contact.
Website Forms & EnquiriesPosting enquiries from the forms on your own website into the CRM, with the page, campaign and source attached.
Telephony & VoIPClick to call from the customer record and, where your phone system supports it, opening the caller’s record and logging calls. Call recordings stay in your phone system.
Power BI & ReportingRead-only access to reporting views and scheduled exports for your own reporting tools.

The full list, with what each integration does, is on our integrations page.

3. Services used by this website

This website is separate from CubeCRM. It uses Google Analytics, only if you allow it, and Amazon SES to deliver enquiries to us. For those we are the controller rather than a processor, so they are covered by our privacy policy and cookie policy rather than this list.

4. Changes and objections

Before we add or replace a sub-processor, we email the nominated contact at every customer at least 30 days in advance, and update this page and its change log. The notice says who the provider is, what it will do, and where.

If you object on reasonable data protection grounds, tell us within that period at hello@cubecrm.co.uk. We will work with you to find a solution and, if we cannot, you may terminate the affected part of the service without penalty. Anyone who is not a customer but would like to hear about changes can ask to be added to the notification list.

5. Change log

Changes to this list
DateChange
28/09/2026Hosting details corrected. CubeCRM is hosted in the UK on Amazon Web Services (AWS), which provides its servers, databases, file storage, backups and system email. The separate group company entry has been removed.
25/09/2026List first published.

Contact

Questions about this document

Email us and a person will reply. For anything about data a business holds in its CubeCRM system, please contact that business first, as it decides how the data is used.

Email us
Company
Cube Systems Limited, trading as CubeCRM
Company number
17220899, registered in England and Wales
Registered office
Unit 11, Olney Business Park, Osier Way, Olney, Buckinghamshire, MK46 5FP
Telephone
01234 672 617
ICO registration
ZC216972