Sub-processors
Last updated: 27 September 2026
Under our Data Processing Agreement with customers, Steps Systems Limited may engage sub-processors to help provide the Steps nursery management software. This page lists the sub-processors that currently process personal data on behalf of our customers.
We give customers at least 14 days' notice by email before adding or replacing a sub-processor, and customers may object on reasonable data protection grounds.
Current sub-processors
| Sub-processor | Purpose | Location of processing |
|---|---|---|
| Amazon Web Services EMEA SARL | Application hosting, database, file storage | United Kingdom (London / eu-west-2) |
| Zoho Corporation B.V. | Email inbox used to receive and respond to messages from customers | European Union |
| Amazon Web Services EMEA SARL (SES) | Outbound email delivery from the App (invoice emails, notifications) sent to parents on behalf of nursery customers | United Kingdom (eu-west-2) |
| GoCardless Ltd | Direct debit collection for Subscription Fees. GoCardless processes the Customer's own bank account details for the purpose of collecting Steps' Subscription Fee | United Kingdom |
Transfers outside the UK
Where a sub-processor is located outside the UK, we rely on:
- an adequacy decision made by the UK government (where one exists for the destination country); or
- the UK International Data Transfer Addendum together with the EU Standard Contractual Clauses.
Notifications
We will notify customers by email at least 14 days before engaging a new sub-processor or replacing an existing one, using the email address on record for the customer's account. Customers may object under clause 5 of the Data Processing Agreement.
Questions
For any questions about this list, email admin@stepsnursery.com.