Data processing
Last updated 17 September 2026
Subprocessors
The providers that process personal information on Suntide's behalf. This is the same list as section 3 of the privacy policy, which also says what each one handles.
| Amazon Web Services | Hosting, database, sign-in, email, reading uploaded bills, messages to Suntide devices, encryption keys, storage. London region; the website is served from a worldwide network. |
|---|---|
| Stripe | Payments and subscriptions. United States and Ireland. |
| Cloudflare | Secure connections for the support desk, customer records and mailing list. Worldwide network. |
| Backblaze | Encrypted backups of the support desk, customer records and mailing list. The Backblaze data region for our account. |
| Fastmail | The support mailbox. Australia and the United States. |
| Mapbox | The address search as you type. United States. |
| postcodes.io | Finding a UK home from its postcode. United Kingdom. |
| Open-Meteo | Weather and sunshine forecasts. European Union. |
| Expo | Delivering phone notifications. United States. |
| Apple | Delivering notifications and live updates to iPhones. United States. |
| Delivering notifications to Android phones. United States and other countries where Google operates. | |
| GitHub | Our private code repository. United States. |
A provider is added here, and to the privacy policy, before it processes any customer data.
Security measures
- Inverter credentials are envelope-encrypted with a dedicated AWS KMS key before storage and decrypted only inside the collection service. No API returns them.
- Secrets never appear in logs, error messages, client bundles, or analytics events.
- All data in transit is TLS; all data at rest is encrypted.
- Access to production is limited to the operator, via short-lived SSO credentials.
Data processing agreement
Suntide serves households, so most customers don't need a signed DPA. If you're a business customer who does, email hello@suntide.energy and we'll put our standard agreement (UK GDPR art. 28 terms, incorporating this subprocessor list) in place.