Sub-Processor and Data Processor List
Introduction
Global Technology Ltd (GTMaritime) processes personal data both as a data controller (where we determine the purpose and means of processing) and as a data processor (where we process personal data on behalf of our customers). In both cases we engage third-party organisations who may process personal data on our behalf.
This page lists those organisations, the services they support, and the locations in which they process data. We review and update this list when processors are added or removed. Customers who have entered into a Data Processing Agreement with GTMaritime have the right to object to new sub-processors in accordance with the terms of that agreement.
Last updated: July 2026
Where GTMaritime acts as a processor for customers
These sub-processors handle personal data that belongs to our customers’ end users, in connection with the delivery of our products and services.
| Sub-processor | Purpose | Products | Data location |
| Amazon Web Services (AWS) | Cloud infrastructure and hosting | GT Mail, GT Replicate, GT Deploy, GT Identify | Ireland and Frankfurt (EU) |
| Sophos | Email threat analysis via Threat Analysis Platform (TAP) | GT Mail | Primary processing in UK/EU. Data may be transferred internationally for threat analysis and support purposes, governed by Standard Contractual Clauses |
| uSecure | Delivery of security awareness training, phishing simulation, and dark web monitoring | GT Aware | EU. See uSecure’s Trust Centre at trust.usecure.io for full details |
| ESET | Endpoint protection and threat analysis | GT Sentinel | EU (headquartered in Slovakia). Data may be transferred internationally for threat analysis and support purposes, governed by Standard Contractual Clauses |
Where GTMaritime acts as a controller
These processors handle personal data for which GTMaritime is the data controller, including customer contact, billing, and support data.
| Processor | Purpose | Data location |
| Oracle NetSuite | Customer billing, invoicing, and support ticketing | EU |
| PipeDrive | Customer and prospect relationship management | United States. Transfers are governed by Standard Contractual Clauses |
GTMaritime resells CrowdStrike products but is not involved in the processing of customer data by CrowdStrike’s platform. CrowdStrike acts as an independent data controller and processor in respect of data processed through their services. Customers should refer to CrowdStrike’s Privacy Notice and their Sub-Processor List for full details of how their data is handled.
Questions
If you have any questions about our use of processors or wish to exercise your rights under your Data Processing Agreement with us, please contact us at dataprotection@gtmaritime.com.