Resulting IT S4SensAI Sub-processor Register

Last modified: Nov 28 2025

Introduction

This page lists the third-party sub-processors used by Resulting Ltd (“Resulting”, “we”, “us”) when providing the S4SensAI service under the Hosted Services delivery model.

These sub-processors process Customer Personal Data on behalf of Resulting, in accordance with the Resulting Data Processing Addendum (DPA) and UK GDPR Article 28.

This page is public but non-indexed and serves as the authoritative source for current and future S4SensAI sub-processors.

If you use S4SensAI exclusively through your own paid ChatGPT environment, Customer Content remains in your environment and these sub-processors do not apply.

1. Current Sub-processors

OpenAI, L.L.C.

Purpose: Model inference, embeddings, vector search, and AI-driven responses

Location: UK/EU regions where available (or as otherwise stated)

Data processed: Customer Content (queries, prompts, documents) where Hosted Services are used

Safeguards: UK Addendum to EU SCCs, encryption, access controls

Amazon Web Services EMEA SARL (AWS)

Purpose: Hosting, storage, cloud infrastructure, environment orchestration

Location: UK/EU regions

Data processed: Encrypted Customer Content (Hosted Services), operational logs

Safeguards: UK Addendum to EU SCCs, ISO 27001 infrastructure

HubSpot, Inc.

Purpose: Authentication flows, usage telemetry, licensing and subscription enforcement

Location: EU data hosting (as available)

Data processed: Service Data (email, authentication logs, usage records)

Safeguards: UK Addendum to EU SCCs, access controls

2. How We Use Sub-processors

We engage sub-processors to support the secure and reliable delivery of S4SensAI. Each sub-processor is contractually required to:

comply with UK GDPR data protection requirements
implement appropriate security measures
process data only for the specific purposes we define
support Resulting’s audit and oversight requirements

Resulting remains fully liable for the actions and omissions of sub-processors engaged under the DPA.

3. Upcoming Changes (Advance Notification)

Under our DPA, customers may object to the appointment or replacement of a sub-processor on reasonable data-protection grounds.

Upcoming sub-processor changes will be listed here at least 30 days before they take effect.

Upcoming Changes: None

4. Change Log

Nov 28 2025 – Initial publication of register

5. Notifications: Subscribe / Unsubscribe

Customers may receive advance notice of sub-processor updates via email.

Please use the form at the bottom of the page to opt in or out of Subprocessor Notification Communications.

6. Objecting to a Sub-processor

If you have a valid data-protection objection to a new or replaced sub-processor listed on this page, you may notify us within 30 days of the published change.

Please include:

Your organisation’s name
The sub-processor you wish to object to
The specific data-protection reasons for the objection

Send objections to: dpo@resulting-it.com

If a reasonable alternative cannot be agreed, customers may terminate the affected Hosted Services and receive a pro-rata refund of prepaid fees for the unused period, as stated in the DPA.