Skip to content

Legal

Sub-processors

In effect from 12 August 2026

Codedevza AI Ltd (Company No. 16485057, registered in England and Wales) uses the third party service providers described below to deliver the Sustainify AI service. These providers act as sub-processors: they process personal data only on our documented instructions, under contracts imposing confidentiality and data protection obligations consistent with the UK GDPR and, where relevant, the EU GDPR.

Where a sub-processor is located outside the UK or the EEA, or processes data outside them, those transfers are protected by appropriate safeguards such as adequacy regulations or standard contractual clauses.

Categories of sub-processor

We select providers that host and process personal data within the European Union or the United Kingdom, with the single exception noted below for AI processing. The specific providers may change as the service evolves. A current, named list is available to organisational customers on request.

  • Cloud hosting and database: running the Sustainify AI platform and storing service data. Processed in the European Union.
  • Object storage: storing documents, evidence files and exports uploaded to or generated by the platform. Processed in the European Union.
  • Email delivery: sending account invitations, password reset links and service notifications. Processed in the European Union.
  • Error monitoring and diagnostics, where enabled: detecting and resolving faults and technical issues. Processed in the European Union.
  • Product analytics, where enabled: understanding aggregate usage in order to improve the service. Processed in the European Union.
  • AI processing for the in-product assistant: generating responses to user questions using relevant workspace data. Routed only to model providers contractually bound not to retain request data or train on it. Processed in the United States under appropriate safeguards, including standard contractual clauses.

Each provider processes personal data only on our documented instructions and under contractual confidentiality and data protection obligations consistent with the UK GDPR and the EU GDPR.

This website

The public website at sustainifyai.co.uk sets no cookies and loads no third party analytics or advertising scripts. Where you submit a form, the details you provide are stored in our own systems on the hosting and database infrastructure described above. Nothing you do on this website is shared with an advertising network.

Changes to this list

We may add or replace sub-processors as the service evolves. We will update this page when we do, and where a customer agreement requires it we will notify organisational customers of material changes in advance and in accordance with that agreement.

Contact

Questions about our sub-processors or about international transfers can be sent to hello@sustainifyai.co.uk, and a person will answer.