This addendum is part of the Terms between you (the controller) and Juniper Enterprises Holdings Limited (the processor), company number 15631236. Registered office: Cn House, Brooks Drive, Cheadle Royal Business Park, Cheadle, Cheshire, United Kingdom, SK8 3TD. Last updated 19 October 2026.
It sets the Article 28 terms for that processing. Your own account data is covered by the Privacy notice, where we are the controller.
Instructions
We process that client data only to provide Juniper OS as you configure it: storing the file, drafting in Talk, running Approves you give, and sending through channels you connect. We do not use it for our own marketing. We do not sell it.
Your documented instructions are these terms, your in-product settings, and written requests through the contact form. If an instruction would break UK law we will say so and pause that step.
People and confidentiality
People who handle the data for us are bound to keep it confidential. Access is limited to what is needed to run or repair the product.
Security
We use encryption in transit and at rest, row-level isolation between customers, an audit log of agent and founder actions, and consent records for what you accepted. Integration credentials are stored encrypted. You still choose who on your side may Approve a send.
Sub-processors
You authorise the sub-processors below. We will not add a new one that processes your client data without listing it here first. A material change will be reflected on this page before that party starts.
| Sub-processor | Role | Region |
|---|---|---|
| Supabase | Database, authentication, storage | Ireland, EU (eu-west-1) |
| Vercel | Application hosting | Global. Not UK-only |
| Anthropic | Model inference | Outside the UK |
| OpenAI | Model inference when used | Outside the UK |
| xAI | Model inference when used | Outside the UK |
| Voyage AI | Embeddings for file search | Outside the UK |
| Stripe | Payments for your Juniper OS seat | Outside the UK, with UK/EU options |
| Resend | Email we send for the product | Outside the UK |
| Twilio | WhatsApp and SMS when you enable them | Outside the UK, with UK/EU options |
| Companies House | Public company lookups you request | UK |
| Sentry | Error monitoring needed to keep the product secure and running | Outside the UK, with EU options |
| PostHog | Product analytics after you accept analytics cookies | EU (eu.i.posthog.com) |
Each sub-processor is bound to keep the data confidential and to process it only for the role above. Model providers are used under API terms. Published API policies for Anthropic, OpenAI and xAI say they do not train on API customer data unless you opt in. We do not opt in. Policies: Anthropic Commercial Terms; OpenAI API data controls; xAI Enterprise FAQ.
International transfers
Primary storage is Ireland, EU (Supabase, eu-west-1). Hosting on Vercel and some model, email and payment processors involve transfers outside the UK. Those transfers use the UK addendum to the EU standard contractual clauses, an adequacy regulation, or the sub-processor's equivalent transfer tool.
Help with rights and breaches
We will help you answer a data-subject request that concerns data in Juniper OS, using the tools in the product where we can. We will tell you without undue delay, and within 72 hours of becoming aware, if we confirm a personal data breach that affects your client data.
Return and deletion
You may export your file while the account is open. When the contract ends we start the 30-day recovery window, then delete client data we no longer need, except records we must keep for law (for example some invoice evidence) and anonymised deletion-audit proof. See the retention schedule.
Audits
You may ask for information that shows we meet this addendum. A deeper audit needs 30 days' written notice through the contact form, is limited to what concerns your data, and must not put other customers at risk. We may share a recent independent report instead of a site visit where that answers the question.
Term
This addendum lasts for as long as we process client data for you under the Terms. If these pages and a later signed paper differ, the signed paper wins for that customer.
Related pages: Terms, Privacy notice, Refunds policy.