Last updated: 23 July 2026. View change log.

This Annex lists categories of third-party vendors and platforms that we may use to deliver services under the Partner Agreement. It applies to all partners and all services unless a Partner Order expressly states otherwise.

This Annex is not exhaustive and may be updated from time to time to reflect changes in technology, suppliers or service delivery models.

1. Use of Third-Party Vendors

  1. We rely on third-party vendors and service providers (“Vendors”) to deliver parts of our IT, Cloud and Web services.
  2. Vendors may provide infrastructure, software, platforms, connectivity, security tooling, monitoring, backup or related services.
  3. You acknowledge that the availability, performance and features of services may depend on Vendors.

2. Vendor Categories

The Vendors we use may include, but are not limited to, the following categories:

  • Cloud and Infrastructure Providers (for example hosting platforms, data centres, compute and storage providers)
  • Software and SaaS Platforms (for example productivity suites, identity platforms, collaboration tools)
  • Security and Monitoring Providers (for example endpoint protection, email security, vulnerability scanning, SOC services)
  • Backup and Disaster Recovery Providers
  • Telecoms and Connectivity Providers (including voice, routing and messaging services)
  • Web and Application Platforms
  • Analytics, Logging and Monitoring Services

3. Changes to Vendors

  1. We may add, replace or remove Vendors as needed to:
    • maintain service quality and security;
    • respond to changes in technology;
    • comply with legal or regulatory requirements; or
    • address Vendor availability or commercial changes.
  2. Where a Vendor change materially affects service delivery, we will give you reasonable notice where practicable.

4. Vendor Terms and Dependencies

  1. Services may be subject to Vendor terms, acceptable use policies and technical limitations.
  2. You are responsible for making sure End Customers accept any relevant Vendor-related constraints where required.
  3. We are not responsible for failures or limitations caused by Vendor systems outside our reasonable control.

5. Data Protection and Sub-Processing

  1. Vendors may act as Sub-processors for the purposes of Schedule 4 (Data Protection and Sub-Processing).
  2. Data processing by Vendors is subject to appropriate contractual and legal safeguards.

6. No Endorsement or Exclusivity

  1. References to Vendor categories or examples do not constitute endorsement, partnership or exclusivity.
  2. We may use different Vendors for different services or partners.

7. Order of Priority

  1. If there is a conflict between this Annex and the Partner Agreement or Schedules, the Partner Agreement and Schedules prevail.
  2. If there is a conflict between this Annex and a Partner Order, the Partner Order prevails.