Last updated: 19 March 2026

BuildersAI uses the following third-party sub-processors to deliver our services. All sub-processors are bound by Data Processing Agreements and are required to implement appropriate technical and organisational security measures.

This page is referenced by our Data Processing Agreement. We will update this page and notify customers at least 14 days before any new sub-processor begins processing personal data.

Infrastructure and Data Storage

Sub-processor	Purpose	Data Processed	Location
Supabase	Database, authentication, file storage	All customer data (accounts, projects, files, site presence events)	EU (Ireland)
PowerSync	Offline data synchronisation	Project data, site presence events, device settings	EU

AI Processing

Sub-processor	Purpose	Data Processed	Location
AWS Bedrock (Anthropic Claude)	AI/LLM processing	AI chat queries, project context provided in prompts	EU (Ireland)

AWS Bedrock does not use customer data to train foundation models.

Payments

Sub-processor	Purpose	Data Processed	Location
Stripe	Payment processing	Billing name, address, payment details, subscription records	EU (Ireland)

Communications

Sub-processor	Purpose	Data Processed	Location
Resend	Transactional email	Email addresses, notification content	EU (Ireland)
Expo (exp.host)	Push notification infrastructure	Push tokens, notification content	United States^*
Firebase / FCM	Push notification delivery	FCM tokens, device info, notification content	United States^*

Monitoring and Analytics

Sub-processor	Purpose	Data Processed	Location
Sentry	Error tracking	Error logs, device info (personal data scrubbed before transmission)	EU (Frankfurt)
PostHog	Product analytics	Anonymised usage events (no personal identifiers)	EU (Frankfurt)

^* International transfers: Expo and Firebase/FCM are located in the United States. Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework are in place for these transfers. The data processed by these sub-processors is limited to push notification tokens and notification content, and is not retained beyond delivery.

Changes to This List

We provide at least 14 days prior notice before any new sub-processor begins processing personal data. If you have reasonable grounds to object to a new sub-processor, please contact us at privacy@buildersai.co.uk within 14 days of notification.

CM Digital Solutions Ltd
Company No. 16913770
82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE