Sub-Processors

Last updated: 20th February 2026

EHS Protect Ltd — SC849512 — Registered in Scotland

EHS Genesis uses the following third-party service providers (sub-processors) to deliver our platform. Each sub-processor has been assessed for data protection compliance and is bound by appropriate contractual obligations. This page should be read alongside our Privacy Policy.

Infrastructure

IONOS SE

Purpose: Platform hosting, database storage, and backup services
Data processed: All platform data including personal data
Location: Germany (EU)
Safeguards: GDPR-compliant EU hosting, no US jurisdictional exposure. IONOS is a German-owned company operating under German and EU data protection law.

Email

Resend Inc.

Purpose: Transactional email delivery (notifications, password resets, system alerts)
Data processed: Recipient email addresses, email subject lines, email content
Location: United States
Safeguards: UK International Data Transfer Agreement (IDTA). Email content is transactional only — no marketing data is processed. Resend does not use email data for any purpose other than delivery.

AI Processing (Optional — Disabled by Default)

Anthropic PBC

Purpose: AI-powered features including document analysis, compliance recommendations, and safety data sheet extraction
Data processed: Text content submitted to AI features (anonymised where possible). No personal identifiers are sent.
Location: United States
Safeguards: UK International Data Transfer Agreement (IDTA). Anthropic does not store, retain, or train on data submitted via their commercial API. Processing is ephemeral — data exists only for the duration of the API call. AI features are opt-in only and require explicit administrator consent.

Error Monitoring

Sentry (Functional Software Inc.)

Purpose: Error monitoring and application performance tracking
Data processed: Application error reports, browser metadata, page context (no PII — sendDefaultPii disabled)
Location: European Union (Frankfurt — ingest.de.sentry.io)
Safeguards: Standard Contractual Clauses

Domain & DNS

IONOS SE

Purpose: Domain registration and DNS management for ehsgenesis.com
Data processed: None (infrastructure only)
Location: Germany (EU)

Changes to Sub-Processors

We will notify customers at least 30 days before adding or replacing a sub-processor that processes personal data. Notifications will be sent to the email address of your organisation's administrator.

If you have concerns about a new sub-processor, please contact us at privacy@ehsgenesis.com.

For full details on how we handle personal data, see our Privacy Policy.