Sub-processors
Last updated: 9 September 2026
The full list of third parties that process data on behalf of Buildinghost, what they process, and where they are located.
1. Current list of sub-processors
In providing the service, Buildinghost acts as a processor of personal data on behalf of your company. For that purpose we use the following sub-processors:
| Provider | Purpose | Scope of data | Location |
|---|---|---|---|
| Supabase, Inc. | Database hosting, authentication and file storage | All application data: accounts, projects, expenses, workers, documents | EU — Ireland (region eu-west-1) |
| Stripe Payments Europe, Ltd. | Payment and subscription processing | Email, company name, payment details, invoice history | EU — Ireland; transfer to the USA possible |
| Google Ireland Ltd. (YouTube) | Demo video on the home page | IP address and device data — only after you press “Play” | EU; transfer to the USA possible |
2. Transfers outside the EU
Primary data storage is entirely within the European Union — the database, authentication and files are located in Ireland and do not leave the EU in normal operation of the application.
Stripe and Google may process limited data in the USA. Both companies apply the European Commission’s Standard Contractual Clauses (Implementing Decision (EU) 2021/914) and are certified under the EU–US Data Privacy Framework.
3. Changes to the list
We will notify customers at least 30 days before adding or replacing a sub-processor. Within that period you have the right to object to the change.
If your objection is well founded and we cannot offer an alternative, you have the right to terminate your subscription without penalty for the remaining period.
4. Contact
Send questions about sub-processors or data transfers to privacy@buildinghost.eu.