BuildPredict AI uses the following sub-processors to deliver the Service. We update this list whenever a sub-processor is added or removed. Where a sub-processor processes personal data outside the UK or EEA, the transfer is governed by UK GDPR Standard Contractual Clauses or an applicable adequacy decision.
If you would like to receive notification of changes by email, write to [email protected] and we will add you to the change-notification list.
| Provider | Purpose | Data categories | Region | Transfer basis |
|---|---|---|---|---|
| Hetzner Online | Application hosting, PostgreSQL database, Redis, and the document search index. | Account profile, project metadata, extracted costs and risk signals, audit-log entries, document text held in the search index. | European Union (Nuremberg, Germany). | Processed within the EEA. No transfer outside the EEA/UK. |
| Cloudflare (incl. R2 storage) | DNS, CDN, DDoS protection, and R2 object storage for your uploaded documents. | IP address, request metadata, TLS handshake, and the original document files you upload. | Global edge. | UK GDPR Standard Contractual Clauses (Cloudflare customer DPA). |
| Vercel | Frontend static hosting and CDN, plus cookieless Web Analytics page-view counting. | Page-load metadata (URL, IP, user-agent). Analytics receives page path, referrer, and coarse country, browser, and device type, with no cookie and no identifier linkable to an account. No document content. | Global edge (TLS only). Origin in US. | UK GDPR Standard Contractual Clauses. |
| Stripe | Payment processing for subscriptions and billing portal. | Email, name, billing address, payment method (held by Stripe under PCI-DSS). | United States. | UK GDPR Standard Contractual Clauses + Stripe DPA. |
| Resend | Transactional email delivery (verification, password reset, billing receipts) and inbound email ingest. | Email address, email body content for inbound ingest, attachments uploaded via the project mailbox. | EU/US. | UK GDPR Standard Contractual Clauses. |
| Google (Gemini API) | Primary LLM inference for cost extraction, risk classification, and AI recommendations. | Document text (typically the BoQ, contract, or progress report being analysed). No account profile. | United States. | UK GDPR Standard Contractual Clauses + Google Cloud DPA. Inputs are not used to train Gemini under the paid API terms. |
| Groq (Llama 3.3 and Llama 4 Scout) | Fallback LLM inference when Gemini is unavailable, rate-limited, or errors, and the vision reader used during document extraction. Receives the same document text as the primary path. | Document text and document page images (the BoQ, contract, or progress report being analysed). No account profile. | United States. | UK GDPR Standard Contractual Clauses. Inputs are processed transiently for inference and not retained for model training. |
| Companies House | UK company solvency and filings lookup for counterparty risk checks. | Counterparty company name and number that you submit. No data about you. | United Kingdom (UK government). | No transfer outside UK. |
| Sentry | Backend and frontend error monitoring. | Stack traces, request metadata, browser metadata. Configured to scrub document content. | United States. | UK GDPR Standard Contractual Clauses. |
| Google Analytics | Aggregated product analytics on the marketing site and in-app pages. | Anonymised usage events, IP truncated by GA, device and browser metadata. No document content. | United States. | UK GDPR Standard Contractual Clauses. |
| Pydantic Logfire | Optional production observability (request spans, LLM call traces). Disabled unless explicitly enabled. | Request URLs, response codes, span timings, redacted outbound HTTP metadata. Secrets are scrubbed before transmission. | United States. | UK GDPR Standard Contractual Clauses. |