Legal · GDPR Article 28
Sub-processors
We use a small set of trusted third parties to deliver Proprietas. Each one is bound by a written data-processing agreement and is assessed annually. We give account admins 30 days' notice before adding or replacing any sub-processor.
Last reviewed 14 May 2026.
Anthropic, PBC
Their privacy policy ↗- Purpose
- AI document extraction — reads uploaded PDFs (leases, compliance certificates) to return structured fields.
- Data categories
- Document contents (which may include tenant names, contractor numbers, building addresses).
- Jurisdiction
- United States
- Transfer mechanism
- EU Standard Contractual Clauses + UK International Data Transfer Addendum (IDTA).
Stripe Payments UK, Ltd.
Their privacy policy ↗- Purpose
- Subscription billing, invoicing, payment-method storage.
- Data categories
- Billing email, billing address, card last-4, payment history.
- Jurisdiction
- United Kingdom (data centre EU + US replica)
- Transfer mechanism
- EU Standard Contractual Clauses + UK IDTA for any US replica access.
Resend, Inc.
Their privacy policy ↗- Purpose
- Transactional email delivery (magic links, notifications, receipts).
- Data categories
- Recipient email address, email subject & body.
- Jurisdiction
- European Union (Ireland)
- Transfer mechanism
- EU adequacy — no transfer outside the UK/EU.
Cloudflare, Inc. (R2 storage)
Their privacy policy ↗- Purpose
- Object storage for uploaded PDFs, photos, and audit-pack exports.
- Data categories
- Customer-uploaded files which may include PII (tenant names, contractor details, signatures).
- Jurisdiction
- European Union jurisdiction (data stored in EU only).
- Transfer mechanism
- EU adequacy + EU SCCs for control-plane operations from Cloudflare US.
Railway Corporation
Their privacy policy ↗- Purpose
- Application + database hosting.
- Data categories
- Entire application database including encrypted PII columns and audit log.
- Jurisdiction
- United Kingdom (London region) / EU.
- Transfer mechanism
- No transfer outside the UK/EU.
Vercel, Inc.
Their privacy policy ↗- Purpose
- Frontend hosting, edge cache, build & deploy.
- Data categories
- HTTP request metadata (IP, user-agent, path) and any data the user submits via the web app.
- Jurisdiction
- Global edge network with US control plane.
- Transfer mechanism
- EU SCCs + UK IDTA.
Change notifications
To subscribe to changes, account admins receive a transactional email from Proprietas at least 30 days before a sub-processor is added or replaced. If you object to a new sub-processor you can terminate your subscription before the change takes effect and receive a pro-rata refund of the unused balance.
Questions: privacy@proprietas.app · See also our Privacy Policy.