LEGAL · SUB-PROCESSORS

sub-processors.

EFFECTIVE 01 · APR · 2026
VERSION 01
GOVERNING LAW England & Wales · Delaware, USA

01 · purpose of this page

Spectra Acquisition engages the following third-party sub-processors to deliver services to clients. Each is bound by contractual terms imposing substantially the same data-protection obligations as those set out in our Data Processing Agreement.

Changes to this list take effect 30 days after the date we publish the update, giving active clients the opportunity to object. Clients who wish to receive email notifications of changes can subscribe by emailing info@spectraacquisition.com.

02 · current sub-processors

Sub-processorPurposeRegionTransfer mechanism
Apollo.ioB2B contact data, firmographics, trigger signalsUSASCCs · UK IDTA
ClayList enrichment, data orchestration, workflow automationUSASCCs · UK IDTA
InstantlyCold email sending infrastructure, warm-up, inbox placementUSASCCs · UK IDTA
SmartleadSecondary sending infrastructure and reply managementUSASCCs · UK IDTA
Google WorkspaceSending mailboxes, calendar, internal documentsUSA · EUSCCs · UK IDTA
Microsoft 365Alternate sending mailboxes and enterprise inbox compatibilityUSA · EUSCCs · UK IDTA
CloudflareDNS, CDN, bot filtering, edge securityGlobalSCCs · UK IDTA
VercelHosting of spectraacquisition.com and related surfacesUSA · EUSCCs · UK IDTA
NeonManaged Postgres for operational dataEU (Frankfurt)N/A (EU)
CalendlyMeeting scheduling for the /contact pageUSASCCs · UK IDTA
MillionVerifierEmail address verification and bounce protectionEUN/A (EU)
HubSpotCRM (where provisioned by us on behalf of a client)USA · EUSCCs · UK IDTA
StripeInvoicing and payment processingUSA · EUSCCs · UK IDTA

03 · scope of processing

  • sub-processors only receive the minimum personal data required for their stated purpose.
  • access is time-bound: revoked at engagement end or when the sub-processor is replaced.
  • the Controller's CRM and calendar are accessed on the Controller's own infrastructure; Spectra does not create shadow copies outside the tools listed above.
  • transfers outside the UK/EEA are protected by UK IDTA or EU SCCs as noted above, together with encryption and access controls.

04 · object or withdraw

If you are an active client and you object to a new or existing sub-processor, email info@spectraacquisition.com. We will work with you to identify an alternative or, if no reasonable alternative exists, you may terminate the affected services with pro-rata refund in line with the Terms.