Legal
Sub-Processor Register
Last updated · Version subprocessors-2026-10-08
About this register
To run Smart Site Plan we rely on a small set of trusted third-party service providers ("sub-processors") that may process personal data on our behalf. We require each of them to protect personal data to a standard consistent with our Data Processing Agreement and to use it only to provide their service to us. This page is the current list.
Most of these providers process data in the United States. Where a provider receives personal data from the European Economic Area, the United Kingdom, or Switzerland, the transfer is covered by the safeguards described in our DPA, such as the Standard Contractual Clauses (with the UK and Swiss adaptations) or the EU-US Data Privacy Framework where the provider is certified.
Core providers
These providers are part of the standard operation of the Service for every customer.
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| Railway | Primary cloud hosting for the API and managed databases (PostgreSQL/PostGIS, MongoDB, Redis). | All platform data: account, project, spatial, GPS, and usage records. | United States |
| Vercel | Hosting and global edge delivery for the web application. | Request and log metadata, including IP address. | United States |
| Cloudflare | Object storage (R2) for uploaded files and exports, plus CDN, DDoS protection, and bot mitigation (Turnstile). | Uploaded files and images, export bundles, IP address. | United States |
| Stripe | Payment processing and subscription billing. | Name, email, and billing details. We never store full card numbers. | United States |
| Resend | Delivery of transactional and account email (verification, security, billing, invitations, alerts, and product updates you have not opted out of). | Name and email address. | United States |
| Sentry | Application error monitoring and performance diagnostics. | Diagnostic and error data, which may include IP address and account identifiers. | United States |
| Axiom | Structured server-log ingestion and retention, used to operate, debug, and secure the Service. | Server log data, which may include IP address and account identifiers. Sensitive fields are masked or scrubbed before ingestion. | United States |
| ipapi.co | Approximate visitor geolocation from IP address, used to set the initial map view when you open the site. | IP address, used to estimate an approximate city or region. No account identifiers are sent. | United States |
Feature-specific providers
These providers are engaged only when you use the related feature or enable the related option, so data flows to them only in that context.
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| ATTOM Data Solutions | Property and parcel data lookups. | The address or coordinates you query. No account identifiers are sent. | United States |
| PostHog | Product analytics, loaded only after you opt in through the cookie banner. | Pseudonymized product-usage events and device metadata. | United States |
| Twilio | SMS delivery for SMS-based two-factor authentication. | Phone number, only if you enable SMS two-factor authentication. | United States |
| AI generation for Site Plan AI (Gemini API): converts a site boundary and development program into a dimensioned concept site plan and presentation rendering. AI search for Ask anything (Gemini API): reads a request for map data and finds and reviews public government datasets that answer it. Also optional OAuth sign-in and Search Console reporting for our public pages. | For Site Plan AI: a numeric summary of the site geometry, the development program, and any site or plan images, aerial captures, or map captures you provide. The parcel street address and identifier (APN) are excluded from AI prompts. For sign-in: email and basic profile. For Ask anything: the text of your request, the earlier requests in the same conversation, the places you name, and the names, fields, and sample records of the public datasets it considers. No account identifiers are sent for Site Plan AI. | United States | |
| OpenStreetMap (Nominatim) | Geocoding addresses to coordinates during site-plan import and search. | The address strings you ask us to locate. | United Kingdom / European Union |
| Photon (komoot) | Reverse-geocoding GPS coordinates to place names when you run a live location tracker. | The GPS coordinates recorded by a live location tracker you start. No account identifiers are sent. | European Union (Germany) |
| Esri | Basemap imagery, public open-data feature services, and address geocoding and search. | Map view requests, and the address strings or coordinates you geocode or search. No account identifiers are sent. | United States |
| OSRM (project-osrm.org) | Route planning between the stops you choose in the route planner. | The waypoint coordinates on a route you build. No account identifiers are sent. | European Union |
| Anthropic | AI analysis (Claude) for document and image analysis and assistant features. These features are not currently enabled, so no data is sent to Anthropic today; it stays listed for transparency and applies when they are turned on. | When enabled: the content you submit for analysis, such as documents and images, and any location data embedded in them. | United States |
Map and data providers
The Service also displays basemaps and open and public data from providers such as map-tile and government GIS services. Map and tile requests are not tied to your account identity, and open or public data you discover is owned by its provider and subject to that provider's own terms and attribution requirements.
Our AI providers develop the models behind our third-party AI features and publish their own disclosures, including about the data used to train those models, on their websites. We do not train models on your content, and under our providers' API terms the content we send is not used to train their models, as described in our Privacy Policy. Some AI runs on our own servers rather than a provider: the image-classification model that ranks Open Data search results evaluates rendered previews of public map layers and sends nothing to a third party.
Changes and notice
We update this register when our sub-processors change. Customers under a Data Processing Agreement may request advance notice of new sub-processors and can object on reasonable data-protection grounds as described there. Questions? Email [email protected].