Subprocessors
The suppliers behind CoreCare delivery.
This list covers suppliers that may process customer personal data for the hosted CoreCare suite. A supplier is included only for the services actually enabled for a customer.
Last reviewed 5 August 2026
| Supplier | Purpose | Data and location notes |
|---|---|---|
| Cloudflare, Inc. and relevant group entities | Network delivery and security, Workers application hosting, D1 database, R2 object storage where configured, service observability and identity protection. | Account, product, technical, security and hosted customer data as required by the enabled service. Cloudflare operates an international network; applicable contractual transfer safeguards are used for restricted transfers. |
Payment and optional integrations
A payment processor or another integration is not automatically a Subprocessor for every CoreCare product. Where a customer enables an optional service that processes Customer Personal Data, the applicable order and this list will identify it before production use. CoreCare does not use this page to claim that an unfinished or test integration is live.
Changes and objections
Customers may subscribe to change notices by emailing privacy@corecaresystems.co.uk. CoreCare will give reasonable advance notice of a new or replacement Subprocessor where practicable. A customer may raise a reasonable data-protection objection under the DPA.