Sub-processors.
- Last updated 1 September 2026
- World Ready Pte Ltd
What this page is for. These are the third parties that may handle personal data on our behalf when you use the World Ready platform. This page is the single source of truth — our Privacy Policy and Data Processing Terms point here rather than duplicating the list, so it can't go stale in two places at once.
It also completes Annex III of the EU Standard Contractual Clauses and the corresponding table of the UK International Data Transfer Addendum.
Contents
How changes work
Before a new sub-processor starts processing your Customer Data, we give you at least 30 days' notice by updating this page and emailing everyone subscribed to notifications.
You may object on reasonable data-protection grounds within 30 days. Until an objection is resolved, we will not engage that sub-processor to process your data. If we can't resolve it, you may terminate the affected services immediately with a pro-rata refund. Full mechanics: Schedule 1 §6 of our Terms of Service.
Subscribe to change notifications: email privacy@worldready.ai with the subject "sub-processor notifications".
Infrastructure
| Sub-processor | Purpose | Entity country | Data location |
|---|---|---|---|
| Amazon Web Services Singapore Private Limited, and Amazon Web Services, Inc. | Cloud hosting, storage, database, search index, job queues, backup, user authentication, content delivery and network protection | Singapore (contracting entity); United States (parent) | ap-southeast-1 (Singapore) |
Platform services
| Sub-processor | Purpose | Entity country | Data location |
|---|---|---|---|
| Amazon Web Services — Amazon Bedrock | AI features — generating output to your tenant. Contractually prohibited from training on Customer Data | Singapore and United States | Australia only. AI requests use the AWS Australia cross-region inference profile, which spans ap-southeast-2 (Sydney) and ap-southeast-4 (Melbourne) and no other region |
| Amazon Web Services — Amazon Textract | Extracting text from documents uploaded to your tenant, including identity documents such as passports | Singapore and United States | ap-southeast-1 (Singapore) and ap-southeast-2 (Sydney) |
| Amazon Web Services — Amazon SES and Amazon SNS | Sending service and notification email, and SMS notifications where you enable them | Singapore and United States | ap-southeast-1 (Singapore). SMS is handed to mobile carriers in the recipient's country for delivery |
| Google LLC | Product analytics within the platform interface | United States | Google's global infrastructure |
Dedicated and customer-hosted deployments
Where you run the platform inside your own cloud account or a dedicated environment, the infrastructure sub-processor is the provider you contract with, and the data location is the one you choose. Your Order Form governs. The platform-services list above still applies to any feature you enable.
Our own group
World Ready Pte Ltd has no subsidiaries or affiliates processing Customer Data. Our personnel access Customer Data from Australia and Singapore.
What is not on this list
- Your own integrations. If you connect a third-party tool to the platform yourself, that tool is not our sub-processor — it acts on your instructions under its own terms with you.
- Our internal business tools that never touch Customer Data — for example our own accounting ledger or code repository.
- Institutions and agents you send data to. When you lodge an application, the recipient is a party you chose, not a supplier of ours.
Questions: privacy@worldready.ai