Subprocessor List
Last updated: 15 July 2026
25Thirty Ltd uses carefully selected service providers to help operate Bridge Admissions. This page must list every provider that processes Customer Personal Data on our behalf.
| Provider and service | Purpose | Data processed | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Vercel Inc. & Supabase Database | Application hosting, databases and backups | Platform records, account and technical data | United Kingdom (London) | Not required (hosted locally in the UK) |
| Microsoft Entra ID / Next-Auth | Sign-in and account security | User identity and authentication data | United Kingdom / EEA | Adequacy Decision / Standard Contractual Clauses (SCCs) |
| Resend Email Delivery | Service and customer communications | Recipient, sender and email content | United Kingdom / EEA | Adequacy Decision / Standard Contractual Clauses (SCCs) |
| Sentry Log Monitor | Support, error and performance monitoring | Technical logs and limited support data | United Kingdom / EEA | Adequacy Decision / Standard Contractual Clauses (SCCs) |
Changes
Customers receive at least 30 days’ advance notice before a new subprocessor begins processing Customer Personal Data, as described in the Data Processing Agreement.
Questions or objections on legitimate data-protection grounds should be sent to privacy@bridgeadmissions.co.uk.