Sub-processors
The companies that process personal data on BIOR's instructions in the course of a BIOR audit, as the data processing agreement provides. Last updated 22 October 2026.
BIOR processes the data in a member's audit as the member's processor. Each company below processes only on BIOR's written instructions, under written terms, for the purpose shown, and retains nothing beyond the period those terms state. BIOR tells members of a change to this list thirty days before it takes effect, by email to the member's audit contact.
| Company | What it does for BIOR | Where the data is held | Transfer safeguard |
|---|---|---|---|
| iomart | Hosting of ior.org, the audit portal and the uploaded evidence copies; the server that sends BIOR's emails | United Kingdom (the IP block 141.98.60.0/22 is registered to iomart Group, GB) | None needed; the data stays in the UK |
| Microsoft Ireland Operations Limited | BIOR's own mailboxes (Microsoft 365), where emails to and from members are held | European Union and United Kingdom data centres | UK adequacy regulations for the EU; Microsoft's data protection addendum |
| Anthropic, PBC | Answers members' typed questions in the portal's help panel from BIOR's published criteria and guides; receives the question text only, never an uploaded document; members are asked not to enter personal details | United States | The provider's Data Processing Addendum (effective 24 February 2025), which incorporates the EU Standard Contractual Clauses and the UK International Data Transfer Addendum (the ICO's Approved Addendum, version B.1.0) for UK GDPR transfers |
Questions: support@ior.org, 0161 232 0991. The British Institute of Recruiters, company number 07575583.