Sub-processors
Everyone who can touch your practice’s data
The short version
- Two are engaged for every practice. Amazon Web Services, in Auckland, holds your files. Amazon’s email service, in Sydney, carries your mail.
- Everything else is a choice you make. Nothing below the first table is engaged unless you use a feature or connect an account.
- This website has no sub-processors at all. clerq.nz loads nothing from anyone — no analytics, no fonts, no tag manager.
- None of them train models on your data, and that is a term of our agreement with them, not a hope.
That summary is accurate but not complete. The detail is below.
What this page is
A sub-processor is any company we use that could, in the course of doing its job, hold or handle information belonging to your practice and your clients. Under the Privacy Act 2020 your practice remains the agency responsible for that information; we act on your instruction, and so does everyone on this page.
We publish the list because the alternative is asking you to take our word for it. If you are assessing Clerq for a practice, this is the page to send to whoever asks you where the data goes.
Engaged for every practice
These two are not optional. Using Clerq at all means using them.
| Sub-processor | What it does | Where |
|---|---|---|
| Amazon Web Services Amazon Web Services, Inc. |
Runs the Clerq service and stores your client records, matters, documents and mail — compute, database, file storage, secrets and queues. | Auckland, New Zealand ap-southeast-6 |
| Amazon Simple Email Service Amazon Web Services, Inc. |
Sends and receives your practice email. Message content is stored in Auckland once received; the transport happens in Sydney. | Sydney, Australia ap-southeast-2 |
Why Sydney. AWS does not offer an email service in its Auckland region. No New Zealand provider can do this differently today — anyone claiming fully onshore email is either using a different definition of onshore or has not checked.
Engaged when you use an AI feature
| Sub-processor | What it does | Where |
|---|---|---|
| Anthropic Anthropic, PBC |
Generates the drafts and analysis you ask for. Client names and identifying details are replaced with tokens before anything is sent, and restored only after the response comes back. Zero data retention is enabled, so Anthropic does not keep what we send. | United States |
The replacement step is not a setting anyone can switch off in the course of using Clerq — it runs inside our own network, on our own servers, before any request leaves. If it cannot run, the request does not go.
Engaged only if you connect the service
Each of these is off until someone at your practice connects an account, and can be disconnected at any time. Disconnecting stops any further exchange; it does not remove data the provider already holds, because that data is in their system under your relationship with them, not ours.
| Sub-processor | What it does | Where |
|---|---|---|
| Microsoft Microsoft Corporation |
Reads a connected Microsoft 365 mailbox so its messages appear in your practice file. | The region your own Microsoft tenant is in |
| Zoho Zoho Corporation Pvt. Ltd. |
Reads a connected Zoho mailbox so its messages appear in your practice file. | The region your own Zoho account is in — we connect to the data centre your account already uses |
| Google Google LLC |
Calendar availability, and importing documents from Google Drive. | United States |
| Meta Meta Platforms, Inc. |
Sending and receiving client messages over WhatsApp, Messenger and Instagram, including any media attached to them. | United States |
| LinkedIn LinkedIn Corporation |
Publishing posts your practice writes in Clerq’s marketing tools. Client file data is not involved. | United States |
What is not on this list, and why
- The anonymiser. The service that strips client details before anything reaches an AI model is ours, and it runs on our own servers inside the Auckland region. It is not a third party and there is nobody else to name.
- This website. clerq.nz sets no cookies and loads nothing from any other company — no analytics, no tag manager, no hosted fonts, no embedded video. There is no sub-processor to disclose because there is no third party involved in you reading this page.
- Immigration New Zealand. Clerq never submits anything to INZ by itself. When your practice files something, that is your practice dealing with INZ directly.
- A payment processor. There is not one yet. When billing is added, this page will list it before it goes live, not after.
When this list changes
We will give you at least 30 days’ notice before adding a sub-processor that would handle your practice’s data, and you have 15 days from that notice to object. If you object and we cannot resolve it — by using someone else, changing the arrangement, or letting you turn the feature off — you may end your subscription and we will refund the unused portion.
To be told when this page changes, email privacy@clerq.nz with the subject Sub-processor notifications. It is a list of email addresses we write to; it is not run by anyone else, because putting a mailing-list provider in the way of this particular page would be an odd choice.
Asking us about any of this
Questions about a specific sub-processor, or a request for what we hold on our arrangements with them, go to privacy@clerq.nz. If you are an applicant rather than an adviser, your privacy relationship is with the practice acting for you — ask them first, and they can ask us.
See also our privacy statement and terms.