Last updated: 2 May 2026
Sub-processors engaged to deliver Enerwise Commercial under UK GDPR Article 28. Partner organisations are notified at least 30 days before any addition or replacement.
| Sub-processor | Purpose | Region | Transfer mechanism | When engaged |
|---|---|---|---|---|
| Supabase (Supabase Inc.) | Primary database, authentication and edge functions | EU (eu-west-1, Ireland) | UK IDTA + SCCs | Always |
| Vercel Inc. | Application hosting and CDN for commercial.enerwise.co.uk | Global edge; primary EU | UK IDTA + SCCs | Always |
| Cloudflare Inc. | WAF, DDoS protection, CDN, bot management, Turnstile | Global edge | UK IDTA + SCCs | Always |
| Resend (Resend Inc.) | Transactional email delivery (auth, notifications) | US with EU egress | UK IDTA + SCCs | Always |
| Sentry (Functional Software Inc.) | Error tracking with PII scrubbing | EU region (de.sentry.io) | UK IDTA + SCCs | Always |
| BetterStack (Better Stack s.r.o.) | Uptime monitoring | EU | UK adequacy (EU) | Always |
| Google Cloud Platform (Google LLC) | BigQuery property data, Cloud Run backend, Secret Manager | europe-west2 (London) | UK IDTA + SCCs | Always |
| HubSpot Inc. | CRM (only when an organisation chooses to connect) | EU / US | UK IDTA + SCCs | When organisation enables HubSpot integration |
| DocuSign Inc. | Contract signature flows | EU / US | UK IDTA + SCCs | When user signs a partner contract or PPA |
| N3rgy Data Ltd | Smart-meter consumption data via DCC | UK | UK only | Only with explicit consumer consent |
| Energy Networks Association (ENA Connect Direct) | DNO connection application submission on user behalf | UK | UK only | When user submits a G98/G99 application |
| HDM Energies Ltd | PPA contracting and partner-side delivery | UK | UK only | When user enters a PPA contract with HDM |
To object to a new sub-processor or request the underlying DPA evidence, email info@solr.ai.