ALSAnalytical
§ PRI-004

Sub-processors Register

This is the current list of authorised sub-processors used by ALS Analytical Ltd. in delivering its services. Additions or replacements are notified in accordance with the Data Processing Agreement (PRI-003).

Effective from
01 January 2026
Version
2026-Q1
Document owner
Ms. Cheryl Ho — Data Protection Officer
Supersedes
—
Next review
Quarterly
§ 01

Hosting and infrastructure

ProviderPurposeLocationSafeguard
Cloudflare, Inc.CDN, WAF, DDoS protection, bot managementGlobal edge (data at rest in HK/SG only)SCCs Module 2 + UK IDTA; ISO 27001, SOC 2 Type II
Equinix Asia Pacific Pte LtdColocation for primary production (HK1, HK5) and DR (SG1)Hong Kong SAR, SingaporePhysical-security addendum; ISO 27001, PCI DSS
Supabase, Inc. (managed Postgres)Client portal database, auth, storageAWS ap-southeast-1 (Singapore)SCCs Module 2, SOC 2 Type II
Amazon Web Services EMEA SARLBackup object storage (encrypted)eu-west-1 (Ireland)AWS DPA + SCCs; ISO 27001, SOC 2 Type II
§ 02

Operations and communications

ProviderPurposeLocationSafeguard
Postmark (ActiveCampaign LLC)Transactional email (portal notifications)US-East, EU-WestSCCs + UK IDTA; SOC 2 Type II
Google Workspace (Google Ireland Ltd)Corporate email, docs, calendar (staff only)EU / globalGoogle Cloud DPA v2.1, SCCs
Zendesk, Inc.Support-ticket handlingEU-WestSCCs; ISO 27001
Twilio Ireland LtdSMS-based MFA for admin accountsEU/globalSCCs; ISO 27001, SOC 2
§ 03

Finance, tax, and screening

ProviderPurposeLocationSafeguard
Stripe Payments Asia LtdCard and bank payment processingHong Kong SAR / globalStripe DPA; PCI DSS L1
Airwallex (HK) LtdMulti-currency invoicing and settlementHong Kong SARSFC-regulated; ISO 27001
Refinitiv (LSEG)Sanctions, PEP and adverse-media screeningUK / IrelandSCCs + UK IDTA
Mazars CPA Ltd (Hong Kong)Statutory audit, tax filingsHong Kong SARProfessional confidentiality; HKICPA-regulated
§ 04

Laboratory sub-contractors

ALS occasionally subcontracts individual tests to accredited partner laboratories, always with prior written Client authorisation on a per-project basis. The current approved panel is:

PartnerScopeAccreditationLocation
Eurofins Scientific SE (Shanghai)Overflow LC-MS/MS peptide impurity workupsCNAS-L2098Shanghai, China
SGS Hong Kong LtdMicrobiological confirmations (BSL-2 pathogens)HOKLAS 0006Hong Kong SAR
ALS Life Sciences AustraliaRadiological screens (gamma spec.)NATA 1215Brisbane, Australia
§ 05

Notification of changes

Additions or replacements are notified at least 30 days in advance to Clients with an active Data Processing Agreement, via the portal announcements page and by email to the registered DPA contact. Objections may be raised to dpo@als-analytical.hk.

Contact — document owner
ALS Analytical Ltd.
Units 2308–2312, 23/F
Kwun Tong Industrial Centre, Phase 4
480 Kwun Tong Road
Kwun Tong, Kowloon, Hong Kong SAR
Postal & courier
Attn: Ms. Cheryl Ho — Data Protection Officer
ALS Analytical Ltd.
P.O. Box 68914, Kwun Tong Post Office
Kowloon, Hong Kong
Registration
HK Business Reg. No. 76239481-000-03-24-2
Companies Reg. No. 2913746
Incorporated 14 March 2019
PDPO Data User Registry: DU-2019-04412