Sub-processors
Third-party services that process data on our behalf
Last updated: 19 March 2026
BuildersAI uses the following third-party sub-processors to deliver our services. All sub-processors are bound by Data Processing Agreements and are required to implement appropriate technical and organisational security measures.
This page is referenced by our Data Processing Agreement. We will update this page and notify customers at least 14 days before any new sub-processor begins processing personal data.
Infrastructure & Data Storage
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | All customer data (accounts, projects, files, site presence events) | EU (Ireland) |
| PowerSync | Offline data synchronisation | Project data, site presence events, device settings | EU |
AI Processing
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| AWS Bedrock (Anthropic Claude) | AI/LLM processing | AI chat queries, project context provided in prompts | EU (Ireland) |
AWS Bedrock does not use customer data to train foundation models.
Payments
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Payment processing | Billing name, address, payment details, subscription records | EU (Ireland) |
Communications
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Resend | Transactional email | Email addresses, notification content | EU (Ireland) |
| Expo (exp.host) | Push notification infrastructure | Push tokens, notification content | United States* |
| Firebase / FCM | Push notification delivery | FCM tokens, device info, notification content | United States* |
Monitoring & Analytics
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Sentry | Error tracking | Error logs, device info (personal data scrubbed before transmission) | EU (Frankfurt) |
| PostHog | Product analytics | Anonymised usage events (no personal identifiers) | EU (Frankfurt) |
* International transfers: Expo and Firebase/FCM are located in the United States. Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework are in place for these transfers. The data processed by these sub-processors is limited to push notification tokens and notification content, and is not retained beyond delivery.
Changes to This List
We provide at least 14 days' prior notice before any new sub-processor begins processing personal data. If you have reasonable grounds to object to a new sub-processor, please contact us at privacy@buildersai.co.uk within 14 days of notification.
CM Digital Solutions Ltd
Company No. 16913770
82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE