Subprocessor and Website Vendor List


Last Updated: July 28, 2026

This page identifies third parties that may process personal information for BrandStory in connection with the website, enquiries or relevant client services. The list must be completed from contracts and production configuration.

Website vendors

  • Google LLC / relevant Google contracting entity — Google Tag Manager and Google Analytics 4 — Online identifiers, device, page, event and consent data — [CONFIRM property and transfer terms] — Known website vendor.
  • Microsoft Corporation / relevant Microsoft contracting entity — Microsoft Clarity interaction analytics and session playback — Online identifiers, device, page, interaction and masked DOM data — [CONFIRM project and terms] — Known website vendor.
  • monday.com Ltd. / relevant contracting entity — monday CRM for enquiry and relationship management — Submitted contact, company, enquiry, attribution and communication data — [CONFIRM account region and terms] — Known website vendor.
  • [Hosting/CDN provider] — Website hosting, delivery and security — [CONFIRM] — Required input.
  • [Form/integration provider] — Form processing and CRM transfer — [CONFIRM] — Required input.
  • [Email provider] — Acknowledgements and business communications — [CONFIRM] — Required input.
  • Custom first-party CMP (BrandStory) — Consent banner, records and preference centre — Consent status, device/browser and timestamp — Processed in the visitor browser / first-party storage — Selected.

For client-processing subprocessors, publish the relevant separate list or clearly distinguish website vendors from processors used in client delivery. Provide a method for contracted clients to subscribe to material-change notices.