Premise sub-processors
In effect 16 September 2026 · Premise
This list mirrors section 4 of the privacy notice. Google Fonts and jsDelivr are recipients (not sub-processors): receive visitor IP when pages load.
| Provider | Purpose | Data | Region | Terms link |
|---|---|---|---|---|
| Supabase | Database, sign-in and files | Account and building records, uploaded files | Frankfurt, Germany | Terms / DPA |
| Vercel | Web app hosting | Requests, account and building data, logs | Functions configured for Frankfurt; provider account data and logs may be processed in the US | Terms / DPA |
| Cloudflare | Website delivery and security | Visitor IP, requests and demo enquiries | Global edge network | Terms / DPA |
| Resend | Email delivery | Email addresses, content and delivery records | United States storage | Terms / DPA |
| Sentry | Error reporting when enabled; it is not enabled today | If enabled: scrubbed errors and internal account IDs | Inactive; EU organisation required before activation | Terms / DPA |
| Expo | Phone app updates; push delivery not currently in use | Device update requests; push tokens only if enabled | Hosting region not confirmed | Terms / DPA |
| Google Fonts | Typeface delivery — recipient, not sub-processor | Visitor IP when pages load | Global delivery; region not confirmed | Terms link not yet verified; contact [email protected] |
| jsDelivr | Animation library delivery — recipient, not sub-processor | Visitor IP when pages load | Global delivery; region not confirmed | Terms link not yet verified; contact [email protected] |
We give building operators at least 30 days' notice before adding or replacing a sub-processor.