GDPR SUB-PROCESSOR LIST
Last updated: 26th February 2026
Energise uses certain third party service providers (“sub processors”) to host, store and process customer personal data and to support the operation of our services. These sub processors only process data on our documented instructions, as required under Article 28 GDPR.
Where our customer contracts require it, we will notify customers in advance of any changes to our sub processor list in line with Article 28(2).
If any sub processor processes data outside the UK/EEA, appropriate safeguards such as Standard Contractual Clauses or the UK IDTA are in place.
Our current sub processors are listed below.
| Name | Personal Data Shared | Sub-processor Data Location |
|---|---|---|
| Airtable | Name, email, company data, org chart info | EU/US (SCCs) |
| Bluehost - Hosting | IP addresses, contact form data, analytics | US (Data Privacy Framework) |
| Cambridge Support | Names, emails, system identifiers, limited access to data during support | UK |
| Clerk Inc | Name, email, login credentials | US (DPF) |
| Cloudflare | IP addresses, connection metadata | Global (DPF and SCCs) |
| CO2Manager | Name, role, email, phone, site address, energy data | UK (Microsoft-hosted cloud storage) |
| Energise.com / Sustemic.com | Name, email, company, message content | UK |
| Exavault (Action Verb LLC dba) | Names, contact details, file contents | US (DPF) |
| Fathom AI | Names, voices, video/audio recordings, meeting notes, email addresses | US (EU-US Data Privacy Framework) |
| Microsoft (Outlook, OneDrive, SharePoint, Teams) | Name, email, contact info, email content, stored document content, meeting content and recordings if used, customer site data within documents | UK/EU |
| Miro | Names, emails, meeting content | EU/US (SCCs) |
| Net Zero Hub | Name, email, phone, site addresses, energy, water, waste, procurement data | UK (Microsoft-hosted cloud storage) |
| PlanetScale | Name, email, organisation, site data | US (DPF) |
| Pointer Pro | Name, email, form responses | EU |
| Resend | Name, email, message content | US (DPF) |
| RETScreen | Name, email, site addresses, energy data | Canada (adequacy decision) |
| Sustemic | Name, email, phone, site addresses, energy and purchasing data | UK |
| SystemsLink | Name, email, phone, site addresses, energy and water data | UK |
| Typeform | Names, emails, form responses | EU |
| UK Vehicle Data Ltd | Vehicle registration, associated contact data | UK |
| Xero | Names, addresses, bank details, invoice and payment details | EU (Xero EU hosting) |
| Zapier | Name, email, activity data | US (DPF) |
| Zoho (Customer) | Name, email, phone, company, activity history, meeting details | EU / US (with SCCs) |