Sub-Processors

At FCC Paragon, we work with a carefully selected number of trusted third-party providers to help us deliver our services securely, efficiently and accurately. Depending on the service provided, these organisations may act as our processor, sub-processor, an independent controller, or in another capacity as defined under applicable data protection legislation. Where they process personal data on our behalf, they do so in accordance with our contractual instructions. Where they act as an independent controller, they determine the purposes and means of processing in accordance with their own legal and regulatory obligations.

Before engaging any third party, we undertake appropriate due diligence to ensure they maintain suitable technical and organisational measures to protect personal data and comply with applicable data protection legislation.

Where a provider transfers personal data outside the UK, we ensure that an appropriate transfer mechanism is in place, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism recognised under UK GDPR.

The table below explains the services each sub-processor provides and why personal data is shared. For further information, please visit our Privacy Policy.

Sub-Processor	Service Provided	Why Personal Data is Shared
TransUnion	Credit referencing	To obtain credit information where this forms part of the referencing service requested by the customer.
Veriphy	Identity verification, AML, PEP and sanctions screening	To verify identity and carry out legally required anti-money laundering and sanctions screening where applicable.
LexisNexis Risk Solutions	Tracing	To verify current or previous address information and assist with locating individuals where required for the referencing service.
Creditsafe	Commercial referencing and business verification	To verify business information, company status and commercial creditworthiness where commercial referencing services are requested.
Yoti	Identity verification and biometric checks	To verify an individual's identity and reduce the risk of identity fraud using biometric verification technology where required.
Equifax	Open Banking	To securely access financial information (with the individual's consent) to support affordability assessments where Open Banking is used.
Microsoft Azure / Hostek	Cloud hosting	To securely host systems, databases and customer information used to deliver our services.
Opayo / BCH Digital	Payment processing	To securely process payments and telephone card payments. Payment card information is handled directly by the payment provider and is not stored by us.