Every third party who touches your data.

The “Yiontech personnel & contractors located outside the UK” entry covers everyone who works for us from outside the UK in any role that involves seeing personal data — today that is customer support (and the in-product support access that goes with it) and operational / platform support where it is needed; any other role or country is covered by the same framework and listed here when it is added. Whenever a team member outside the UK looks at a record, that is a restricted transfer under UK GDPR Chapter V, and it is governed by the same machinery as any other non-UK processing in this list: the UK International Data Transfer Agreement, a completed Transfer Risk Assessment for the destination country, and a set of supplementary measures — data stays on UK / EEA infrastructure and is accessed record-by-record through the product (no bulk export), every access is logged, role-based access plus row-level isolation means a person only ever sees data for the businesses or systems their role covers, data is minimised, and the person works from a managed device under a written data-protection and confidentiality undertaking. If a team member is engaged as an independent contractor they are a sub-processor under our DPA; if engaged directly by Yiontech they are personnel — either way the transfer safeguard and the supplementary measures are the same.