BriefLink Sub-processor Register
Version: 2026-06-07
Last updated: 7 June 2026
This register lists third parties that process personal information on behalf of BriefLink when delivering the service to subscribing firms.
Draft for counsel review. We will notify firm administrators of material changes before new sub-processors process firm data.
Active sub-processors
Google LLC
| Field | Detail |
|---|---|
| Purpose | Document storage (firm-owned Drive), calendar two-way sync, optional email correspondence capture |
| Data processed | Document files and metadata; calendar events; email message metadata and snippets (when capture enabled) |
| Scopes | `drive.file`, Calendar scopes, `gmail.readonly` (incremental, when capture enabled) |
| Location | United States and other Google data centre regions |
| Privacy | Google Cloud Privacy Notice |
Drive posture: Files are stored in the firm's Google Drive. The firm is the responsible party for document content. BriefLink is operator for platform processing only.
Microsoft Corporation
| Field | Detail |
|---|---|
| Purpose | Optional email correspondence capture |
| Data processed | Email message metadata and body preview/snippets (when a firm user connects Outlook and capture is enabled) |
| Scopes | `Mail.Read`, `offline_access` |
| Location | Microsoft global cloud infrastructure |
| Privacy | Microsoft Privacy Statement |
*Only applies when a firm user connects a Microsoft account and the firm has enabled communications capture.*
WhatsApp Business Solution Provider (BSP)
| Field | Detail |
|---|---|
| Services | WhatsApp Business API (via selected BSP, e.g. Meta Cloud API, Twilio, or 360dialog) |
| Purpose | Optional WhatsApp correspondence capture for firm's registered business number |
| Data processed | Message metadata and snippets only; forward-only from connection date |
| Note | This entry will be updated with the specific BSP name, contact, and DPA link before the feature is enabled in production |
Infrastructure
BriefLink production hosting (VPS, PostgreSQL, Docker) is operated by BriefLink directly. Hosting provider details are available on request to subscribing firms.
Change notification
Material additions or replacements of sub-processors will be communicated to firm administrators via email or in-app notice at least 30 days before the new sub-processor processes firm data, where feasible.
Contact
Questions about sub-processors: info.brieflink@gmail.com