Trust & legal
Subprocessors
Last updated 2026-10-20
Current subprocessors
(Third-party subcontractors that process customer data.)
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | DNS, TLS, firewall and DDoS protection in front of every request | All web traffic passes through it (encrypted in transit) | Global network |
| Application hosting — a US-based cloud server provider (virtual private servers) | Hosts the application and database | All Customer data | United States |
| Amazon Web Services (S3) | Photo and file storage; nightly database backups | Photos and files; encrypted database backups | United States (US West) |
| Resend | Transactional email (updates to your customers, staff notices, reports) | Recipient email address and message content | United States |
| Anthropic (Claude) | AI: job type suggestions, customer chat, chat insights, summaries and reply drafts, Spanish translation drafts, help assistant | Only the text or photo each feature needs | United States |
| Mapbox | Base maps and street routing | Map tile requests; stop coordinates for routing (no names or contact details) | United States |
| OpenStreetMap Foundation (Nominatim) | Address search fallback and reverse geocoding | Search text and coordinates | United Kingdom / EU |
| Clerk | Staff sign-in and single sign-on (when enabled) | Staff name and email | United States |
Systems you connect
Systems your company connects through webhooks or the API are operated by your company or its vendors, not by CSP, and receive only the events and data you choose.
Fallbacks
If Mapbox is unavailable, routing may fall back to an OSRM routing server and straight-line estimates. Production deployments use a self-hosted or Mapbox service, not the public OSRM demo server.
Changes
We update this page when subprocessors change. Customers with a signed DPA are notified in advance. Questions: [email protected].