Skip to content

Legal

Sub-processors

In effect from 16 August 2026

Effective Date: 16-08-2026

Wastify AI Ltd ("Wastify", "we", "us") uses a small number of third party providers to deliver the Wastify AI platform. Where those providers process personal data on our behalf, they are sub-processors under the Data Processing Agreement. This document lists the categories we use, what each is for, and where the processing happens.

Categories of sub-processor

  • Cloud infrastructure: hosting of the platform, its databases and backups. Processing in the United Kingdom and the European Economic Area, with appropriate safeguards where a provider’s support operations sit elsewhere.
  • Object storage: storage of photographic evidence and generated reports. Processing in the United Kingdom and the European Economic Area.
  • Email delivery: transactional email such as report notifications, account messages and support correspondence.
  • AI model services: image classification for WasteID and language processing for Living AI. Images are processed to identify waste items and streams; providers are contractually barred from using customer data to train their models.
  • Error monitoring and logging: operational telemetry used to detect and fix faults. Configured to minimise personal data.

International transfers

Where a sub-processor processes personal data outside the United Kingdom or the European Economic Area, the transfer is covered by an appropriate safeguard: the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses, as applicable, together with any supplementary measures the transfer assessment calls for.

Changes to this list

We give customers prior notice before adding or replacing a sub-processor, with a reasonable opportunity to object, as set out in the Data Processing Agreement. The current named list of providers within these categories is available on request from hello@wastify-ai.co.uk.

Our commitments

Every sub-processor is bound by a written contract imposing data protection obligations no less protective than those we owe our customers, and we remain responsible to our customers for sub-processor performance.