Subprocessors
The third-party providers that may process personal data for customers of the Gaia carbon accounting platform, what each one does for us, and where the data is processed.
Last updated: 7 October 2026
When you use the Gaia carbon accounting platform, Gaia Technologies Ltd processes personal data on your behalf as a data processor under UK GDPR. We rely on a small number of other companies to run the platform. Where one of them handles that personal data, it is a subprocessor. Each subprocessor is bound by data protection terms that limit it to the service we use it for.
Current subprocessors
| Subprocessor | What it does for us | Personal data involved | Location |
|---|---|---|---|
| Amazon Web Services | Hosts the platform: servers, database, file storage, backups and background jobs | All customer data in the platform, including user accounts and uploaded files | UK (London) |
| Amazon Web Services (Amazon Textract) | Reads uploaded energy and fuel bills and suggests figures for you to confirm | Contents of uploaded bills, which can include names and addresses | UK (London) |
| Amazon Web Services (Amazon Bedrock) | Runs the G.AI assistant inside AWS. The model's developer does not receive your data | Questions asked of G.AI and the account data used to answer them | UK (London) |
| Postmark (ActiveCampaign, LLC) | Sends transactional email, such as invitations, password resets and report notifications | Name, email address and the content of each email | United States |
| Intercom | In-app support chat and help centre | Name, email address, user ID and support conversations | United States |
| Pipedrive | Customer relationship management, so our team can support new accounts | Name, email address and organisation name of the person who registers an account | European Union |
| Usage analytics in the web app, loaded through Google Tag Manager | Pages viewed, device and browser details, and IP address | United States |
Where your data is processed
The platform itself, and everything you put into it (emissions data, bills, invoices, evidence files and reports), is hosted and processed by AWS in the United Kingdom.
A few services need contact details to work: sending email, answering support chats and looking after your account. For those, a limited set of personal data, mainly names, email addresses and the messages themselves, is processed in the United States or the European Union. Where personal data leaves the UK, the transfer is covered by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by the International Data Transfer Addendum to the EU Standard Contractual Clauses.
Services you choose to connect
Some features connect the platform to accounts you already hold elsewhere: accounting software such as Xero, QuickBooks and Sage, cloud accounts on AWS or Microsoft Azure for cloud emissions, and single sign-on through Microsoft Entra ID or Google. These providers are not our subprocessors. You decide to connect them, data moves between your account with them and the platform on your instruction, and your own agreement with each provider governs how they handle it. You can disconnect an integration at any time.
Changes to this list
We update this page before a new subprocessor starts processing customer personal data, and record each change in the log below. If you would like to hear about changes by email, or have a question about how a subprocessor handles your data, contact us at info@gaiacompany.io.
This list covers the carbon accounting platform. How we handle personal data as a controller, including when you visit this website, is set out in our privacy policy.
Change log
- 7 October 2026: list first published.