Sub-processors
Draft v0.2 — last updated 18 October 2026. This is a working draft and is being reviewed; items highlighted in yellow are still to be completed or confirmed.
These are the providers we use that may handle customer or personal data. Customers are told at least 14 days before we add or replace one (see the Data Processing Agreement). Providers marked as optional are only involved if the customer turns the matching feature on.
| Provider | What it does | Data involved | Where | Used when |
|---|---|---|---|---|
| DigitalOcean, LLC | Hosting: the servers, database and file storage that run the service, and the nightly backups. | All customer data held in the service. | Amsterdam, the Netherlands (DigitalOcean region AMS3), inside the EU | Always |
| Microsoft Corporation / Microsoft Ireland Operations Ltd (Microsoft 365) | Sending the service's emails — welcome emails, password resets, reminders and summaries — from our no-reply mailbox. If a customer connects its own Microsoft 365, the calendar, SharePoint and Teams features act through that customer's own Microsoft tenant. | Recipient name and email address, and the content of the email. | confirm the Microsoft 365 tenant's data location | Always |
| Twilio Inc. | Text messages (SMS) — only if a customer switches texts on and its people opt in. | Recipient mobile number and the text of the message. | United States and Twilio's global network. Transfers are covered by the EU Standard Contractual Clauses in Twilio's Data Protection Addendum confirm Twilio's current mechanism | Only if the customer turns the feature on |
| Anthropic, PBC | The AI features (Grid Guide help assistant, AI count, AI document review and drawing title reading) — only if a customer turns them on with its own key. | The question asked and the help context sent with it; for AI count and review, the drawing or document page being analysed. | United States. Transfers are covered by the EU Standard Contractual Clauses in Anthropic's Data Processing Addendum confirm Anthropic's current mechanism | Only if the customer turns the feature on |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Subscription billing for the service (card payments). If a customer connects its own Stripe account, payment links for that customer's own invoices. | Company administrator's name, email and billing details. Card numbers go straight to Stripe and are never stored by us. | Ireland / United States | Always |
| GoCardless (Bank Account Data) | Bank feeds — only if a customer connects a bank account for reconciliation. | Transactions on the account the customer chooses to connect. | United Kingdom and the EU (GoCardless Ltd, London; GoCardless SAS, Paris) confirm where Bank Account Data is stored | Only if the customer turns the feature on |
| Open-Meteo | Weather forecasts for project sites. | Site coordinates only. No personal data. | Servers in Europe and North America confirm operator and location | Always |
| OpenStreetMap Foundation (map tile servers) | Map backgrounds on the site-location maps. | The viewer's IP address and the map area being viewed. | United Kingdom and the Netherlands, with backups in the EU (per the OpenStreetMap Foundation's privacy policy) | Always |
| Apple, Google and Mozilla push services | Delivering push notifications to the phones and browsers of people who switch notifications on. | The notification title and text. | Global | Only if the customer turns the feature on |
| UptimeRobot | Availability monitoring: checks a health address every few minutes and emails us if the service is down. | No customer or personal data — the address it checks returns only 'ok' or a list of failing checks. Our alert email address is held by the provider. | UptimeRobot s.r.o., Europe confirm registered country | Always |
Our own backups are also kept on a computer controlled by PROVIDER LEGAL NAME's administrators (for up to 30 days) in addition to those held at DigitalOcean, LLC. Confirm the disk is encrypted and access-controlled.