Sub-processors
Last updated 01/10/2026
Buildano uses the following providers to process personal data on our behalf (as our sub-processors) under data-processing agreements. We notify account owners at least 30 days before adding or replacing one (see our Data Processing Agreement, section 5).
| Provider | What they do for us | Where data is processed | Transfer safeguard |
|---|---|---|---|
| Vercel Inc. (USA) | Hosting and running the application | Application servers in London, United Kingdom; content delivery network worldwide | UK adequacy decision; EU-U.S. Data Privacy Framework; Standard Contractual Clauses |
| Supabase, Inc. (USA) | Managed PostgreSQL database and backups | London, United Kingdom (eu-west-2) | UK adequacy decision; Standard Contractual Clauses |
| Plus Five Five, Inc. — "Resend" (USA) | Sending service emails (sign-in links, invitations, notifications) | United States | EU-U.S. Data Privacy Framework; Standard Contractual Clauses |
| Anthropic, PBC (USA) | AI processing — only if the Customer uses the AI add-on | United States | Standard Contractual Clauses |
| Norwegian Meteorological Institute — "MET Norway" (Norway) | Weather forecasts for the site diary — receives only the site's coordinates (rounded to about 1 km), never account data | Norway (EEA) | GDPR applies directly (EEA) |
| OpenStreetMap Foundation (United Kingdom) | Looking up the place name typed for a project's site location (Nominatim) — receives only that place name | United Kingdom / European Union | UK adequacy decision |
A file-storage provider for uploaded plans and photos will be added to this list before file uploads are enabled.
Independent controllers (not sub-processors)
These parties receive data but decide themselves how to process it, under their own privacy policies:
- Stripe (Link) — merchant of record for Buildano subscriptions (payment, invoicing, VAT, fraud prevention).
- Your own payment provider (Stripe or Viva Wallet), if you connect your own account to collect payments from your clients.
- AADE (Greek Independent Authority for Public Revenue), if you transmit invoices to myDATA with your own credentials.