Sub-processors

These are the third parties that process personal data on our behalf, what each is for, and where it happens. It is a complete list of the processors involved in running this website.

Hosting and database

Railway, EU West region. Runs the website and its database, and keeps standard server logs. All service data for this site sits here.

Object storage

S3-compatible object storage, Amsterdam region. Holds uploaded media and the gated documents. Gated files are in a private bucket and are released only as signed links that expire after ten minutes, so an object cannot be fetched by guessing its address.

Bot protection

Cloudflare Turnstile. Runs on the contact form and the document download to keep automated submissions out. It sets no cookies, and it is strictly necessary for those two forms to work, so it does not require consent.

Analytics, consent only

Microsoft Clarity. Records how pages are used, so we can see which pages are read and where people get stuck. It is never fetched unless you have agreed, and withdrawing consent deletes the identifiers it wrote. Microsoft processes this data outside the UK and the EEA, and that transfer relies on standard contractual clauses.

Email delivery

Our mail provider delivers the document you requested and notifies us of an enquiry. It handles the contents of those messages in transit.

Changes to this list

We will update this page before a new processor starts handling personal data, not afterwards. If you are assessing us for procurement and need this in a signed form, write to support@sustainifyai.co.uk.