Premise sub-processors
In effect 13 October 2026 · Premise
This list mirrors section 4 of the privacy notice. Since 13 October 2026 this website serves its own typefaces and animation library, so no font or script provider receives visitor IP addresses.
| Provider | Purpose | Data | Region | Terms link |
|---|---|---|---|---|
| Supabase | Database, sign-in and files | Account and building records, uploaded files | Frankfurt, Germany | Terms / DPA |
| Vercel | Web app hosting | Requests, account and building data, logs | Functions configured for Frankfurt; provider account data and logs may be processed in the US | Terms / DPA |
| Cloudflare | Website delivery and security | Visitor IP, requests and demo enquiries | Global edge network | Terms / DPA |
| Resend | Email delivery | Email addresses, content and delivery records | United States storage | Terms / DPA |
| Sentry | Error reporting when enabled; it is not enabled today | If enabled: scrubbed errors and internal account IDs | Inactive; EU organisation required before activation | Terms / DPA |
We give building operators at least 30 days' notice before adding or replacing a sub-processor.