Legal
Sub-processors
Last updated 5 October 2026 · Effective 5 October 2026
These are the companies that Ardent Africa Foundation LBG uses to run Agoo and that may process personal data our customers keep in it. This list is part of our data processing agreement, and we keep it separate because it changes more often.
Current sub-processors
Agoo is in early access. Where a provider applies only once a feature is turned on or launched, the last column says so. Each one processes personal data only to provide its service to us, under a written contract that requires confidentiality and security.
| Provider | What it does for Agoo | Personal data | Location | When it applies |
|---|---|---|---|---|
| Supabase | Hosts the database where Agoo keeps your organisation’s records, with encrypted backups. | All data held in Agoo: account and sign-in details, and the visitor, booking, attendance and audit records your organisation keeps | United Kingdom | Always (core service) |
| Vercel | Hosts Agoo’s website, documentation and web apps. | Technical request data (IP address, browser, pages requested); enquiry form submissions; data shown in the web apps as it passes through | United Kingdom, with a global delivery network | Always (core service) |
| Cloudflare | Protects and delivers Agoo’s services, stores the files uploaded to Agoo, such as photos, signatures and documents, and runs Agoo’s status page. | Technical request data (IP address, request details); files uploaded to Agoo, such as visitor photos, ID images and signatures; status page subscribers’ email addresses | Global network; files stored in Western Europe | Always (core service) |
| Fly.io | Hosts Agoo’s application servers. | Data processed by Agoo’s services while it is being processed | United Kingdom | Always (core service) |
| PowerSync | Lets Agoo’s kiosk and staff apps keep working without a connection. | The records a device needs for its own site, such as the day’s expected visitors | European Union | From the launch of the native apps |
| Twilio SendGrid | Delivers Agoo’s email: passes, invitations, notifications, sign-in links, invoices, status updates and replies to enquiries. | Recipient name and email address, message content, delivery status | United States | Always (core service) |
| Hubtel | Delivers Agoo’s SMS messages in Ghana, such as passes, host alerts, sign-in codes and roll-call links. | Recipient phone number, message content, delivery status | Ghana | Always (core service) |
| Meta | Delivers WhatsApp messages. | Recipient phone number, message content, delivery and read status | Global (Meta’s data centres) | Only when your organisation turns WhatsApp on |
| Apple, Google | Deliver notifications to the Agoo apps on iPhone, iPad and Android. | Device token, notification content | Global | From the launch of the native apps |
| Paystack | Takes card and Mobile Money payments for plans, top-ups and invoices. Card and Mobile Money details go straight to Paystack and are never stored by Agoo. | The Owner’s email, payment amount and reference, payment method details (held by Paystack) | Ghana, Nigeria | When your organisation pays for a plan, top-up or invoice |
| Anthropic | Provides the Claude models behind Agoo AI: Ask Agoo, ID reading when the kiosk can’t read an ID itself, logbook digitising and drafting. Anthropic’s commercial terms don’t allow it to train models on this data. | The content of each AI task, with personal details removed where the task doesn’t need them; cropped ID images and logbook photos when those features are used | United States | Only when your organisation turns Agoo AI on |
Planned
These providers are part of Agoo’s planned architecture but don’t process customer personal data yet. Each will be added to the list above, with its location, and customers given at least 30 days’ notice, before it does.
- An error-monitoring provider: Finding and fixing errors in Agoo’s apps; named here before it processes any personal data.
- A service-monitoring provider: Keeping Agoo fast and available; named here before it processes any personal data.
- A second SMS provider in Ghana: Backup SMS delivery if Hubtel is unavailable.
Services you connect
When your organisation connects one of these, Agoo sends data to it on your instruction. It acts for your organisation under your own agreement with its provider, so it isn’t our sub-processor.
- Google, Microsoft: Calendar sync and single sign-on, when your organisation connects them.
- Your identity provider: SAML single sign-on and SCIM provisioning, when your organisation sets them up.
- AI assistants you connect: Assistants (such as Claude or ChatGPT) that your people connect to Agoo through the MCP server.
- Your webhook endpoints and apps: Systems your organisation sends Agoo data to through webhooks, the API or OAuth apps.
Changes to this list
We tell customers at least 30 days before a new sub-processor starts processing their personal data, by email to the Owner and by updating this page. Customers can object on reasonable data protection grounds, as the data processing agreement describes. Questions about this list can be sent to agoo@ardentafrica.com.