Legal information
ATCRoster subprocessors
This list identifies providers currently expected to process customer information for the hosted ATCRoster service. The signed customer agreement and deployment configuration remain authoritative.
| Provider | Purpose | Information | Location/transfer |
|---|---|---|---|
| Railway Corporation | Application, PostgreSQL and Redis infrastructure | Account, roster, operational, audit and technical service data | Configured deployment region; confirm the production region and contractual transfer terms |
| Twilio Inc. | Optional operational SMS delivery | Telephone numbers, message content, delivery metadata | Global provider; applicable UK transfer safeguards required |
| Configured email provider | Invitations, recovery and service email | Email address, delivery metadata and message content | Provider and region must be recorded before launch |
| Configured backup provider | Encrypted resilient backups and recovery | Encrypted copies of hosted customer data | Provider and region must be recorded before launch |
Airport customers should receive advance notice of a new subprocessor and a reasonable opportunity to object on genuine data-protection grounds, as specified in the data-processing agreement.
Questions or objections: staging-support@atcroster.invalid.