Kalma
Back to home

Subprocessors

Last updated: [DATE]

To provide [SERVICE NAME], we rely on providers that act as processors (subprocessors) on our behalf, under the relevant data-processing agreements. Below we list who they are, what we use them for, where they process data and which categories of personal data they may process.

ProviderPurposeLocationData processed
SupabaseDatabase and hostingUSA / EU (by region)Account and project data
VercelApplication hosting and deliveryGlobal (USA)Technical and log data
ResendTransactional email deliveryUSAName and email address
GoogleSign-in (OAuth)Global (USA)Email and account identifier
AutodeskConstruction Cloud integrationGlobal (USA)File tokens and metadata

International transfers

Where a subprocessor processes data outside the European Economic Area, the transfer relies on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs).

Changes to this list

We may update this list when we add or replace subprocessors. We will notify changes in accordance with our DPA, giving you the opportunity to object on reasonable data-protection grounds.