Legal
Sub-processors
In effect from 30 September 2026
Effective Date: 30-09-2026
Wastify AI Ltd ("Wastify", "we", "us") uses a small number of third party providers to deliver the Wastify AI platform. Where those providers process personal data on our behalf, they are sub-processors under the Data Processing Agreement. This document lists the categories we use, what each is for, and where the processing happens.
This list covers the Wastify AI platform, where we process personal data on behalf of our customers. It does not cover the public website at wastify.co.uk, where we decide for ourselves what is collected. On the website, Cloudflare, Inc. (United States), which checks that the enquiry form on our contact page and our document request forms are filled in by a person, acts as our own processor rather than as a sub-processor, and also uses some of that data on its own account, as our Privacy Policy explains.
Categories of sub-processor#
- Cloud infrastructure: hosting of the platform, its databases and backups. Processing in the United Kingdom and the European Economic Area, with appropriate safeguards where a provider’s support operations sit elsewhere.
- Object storage: storage of photographic evidence and generated reports. Processing in the United Kingdom and the European Economic Area.
- Email delivery: transactional email such as report notifications, account messages and support correspondence.
- AI model services: image classification for WasteID and language processing for Living AI. Images are processed to identify waste items and streams; providers are contractually barred from using customer data to train their models.
- Error monitoring and logging: operational telemetry used to detect and fix faults. Configured to minimise personal data.
International transfers#
Where a sub-processor processes personal data outside the United Kingdom or the European Economic Area, the transfer is covered by an appropriate safeguard: the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses, as applicable, together with any supplementary measures the transfer assessment calls for.
Changes to this list#
We give customers prior notice before adding or replacing a sub-processor, with a reasonable opportunity to object, as set out in the Data Processing Agreement. The current named list of providers within these categories is available on request from hello@wastify-ai.co.uk.
Our commitments#
Every sub-processor is bound by a written contract imposing data protection obligations no less protective than those we owe our customers, and we remain responsible to our customers for sub-processor performance.