Sub-processors

Last updated: 6 May 2026

ValueNova Limited engages a small number of third-party service providers ("Sub-processors") to deliver and support the Service. We are committed to transparency about who processes Customer Data on our behalf.

This page lists all current Sub-processors. Customers are notified at least thirty (30) days before any new Sub-processor is added or replaced. The full process and customer rights are set out in our Data Processing Agreement.

Current sub-processors

Sub-processorService providedData processedLocation
Google Cloud Platform (Google Ireland Limited for UK and EU customers; Google LLC for US customers)Cloud hosting infrastructure (compute, storage, networking)All Customer Data hosted on the ServiceUK (europe-west2 — London) for UK customers; EU (europe-west1 — Belgium) for EU customers; US regions for US customers
Supabase, Inc.Managed PostgreSQL database, authentication, and real-time data servicesStructured Customer Data including account, deal and value-model dataUK / EU regions for UK and EU customers; US regions for US customers, in accordance with our data-residency commitments
Anthropic, PBCAI inference — Claude foundation models for value-modelling featuresCustomer prompts and inference inputs (no training; no retention beyond the session)US — processed under Anthropic's enterprise no-training terms

Customer rights

When ValueNova adds or replaces a Sub-processor, ValueNova will:

  1. notify the Customer at least thirty (30) days before the change takes effect;
  2. allow the Customer thirty (30) days to object in writing on reasonable data protection grounds; and
  3. if the Customer objects and the parties cannot resolve the matter, either party may terminate the affected Order Form on written notice with a pro-rata refund of any prepaid, unused fees.

All Sub-processors are bound by data protection obligations no less protective than ValueNova's own commitments under the customer's Data Processing Agreement.

Data residency

ValueNova commits to the following data residency:

  • UK customers — personal data processed on Google Cloud Platform europe-west2 (London).
  • EU customers — personal data processed on Google Cloud Platform europe-west1 (Belgium) or another EU region.
  • US customers — personal data may be processed in US regions where the customer permits.

International transfers

Where personal data is transferred outside the United Kingdom or the European Economic Area to a jurisdiction not deemed adequate under UK GDPR or EU GDPR, ValueNova relies on:

  • From the UK: the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, in each case as issued by the Information Commissioner's Office.
  • From the EEA: the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) Module 2 (controller-to-processor).

A Transfer Impact Assessment is available on request to admin@valuenova.ai.

Note on website analytics

ValueNova's marketing website at valuenova.ai uses Google Analytics 4 for aggregate website analytics, configured with IP anonymisation enabled and no advertising features. Google Analytics is a website-only analytics tool and is not a Sub-processor of Customer Data under the Service. See our Cookies Policy for full details.

Contact

For sub-processor questions, objections, or DPA queries:

ValueNova Limited
4 Cromwell Court, New Street
Aylesbury, United Kingdom HP20 2PB
admin@valuenova.ai