Subprocessors
Effective September 25, 2026 · Updated October 13, 2026
These are the third-party providers that help us operate ROM Estimator and The Project Manager, and what each one touches. We keep this list short on purpose.
| Provider | What it does | What it processes | Region |
|---|---|---|---|
| Supabase | Managed database, authentication, and file storage | Account information, workspace content, files, audit and error records | AWS, western US |
| Cloudflare | Site and app hosting, CDN and TLS, email routing for our mailbox, cookieless site analytics | HTTP request metadata, contact-form messages in transit, coarse pageview counts | Global edge, US origin |
| Anthropic | Optional AI features: RFP intake, basis-of-estimate narrative drafting, and automatic reading of scanned paper field reports; sorting and summarizing feedback reports; and Claude as a working tool for Grove Hall's own support and data loading | For RFP intake, the brief text a user submits. For narrative drafting, the estimate it is written for: the client name and project type, region and opening year, the cost figures and range, the cost drivers, assumptions and exclusions, and up to six comparable projects used (for an internal draft their names, years, regions and costs; for a client draft only a general description, region and similarity). Both only for organizations that switched AI processing on. For paper reading, only for organizations that switched paper reading on: the scanned report pages with everything written on them, the names the organization's office gave the active people on the crew list and other spellings of those names taken from earlier paper reports (never Crew IDs, email addresses or passwords), the open job names and the date. Each switch is off by default and enforced server-side, Grove Hall's own accounts cannot turn paper reading on, and a person confirms every scanned report before it is posted. Also the feedback reports people choose to send with the Feedback button (the message and the technical details, whatever the organization's AI setting; the small copy of the screenshot only for organizations that switched AI processing on, or senders who were not signed in), read to sort and summarize them. Under Anthropic's commercial terms none of the above is used to train models; Anthropic deletes it within 30 days, and keeps it longer only if its automated safety systems flag it or the law requires it. Separately, when Grove Hall loads an organization's files at its request or looks into a support question, Claude may read the files or records involved, under the terms of Grove Hall's own Claude plan rather than the services' settings. Anthropic's own providers are listed at trust.anthropic.com/subprocessors | US for inference and storage: every request the services send asks for US-only processing, and Anthropic stores data in the US. Anthropic's safety review, support and incident response can involve its staff and providers outside the US. Grove Hall's own support use follows its Claude plan's settings |
| Voyage AI | Search embeddings for an organization's own estimate library | A short text summary of an estimate (title, type, tier, region, size, indoor flag, opening year, the client label your team entered, and element labels) and the text of each library search, only for organizations that switched AI processing on (off by default, enforced server-side) | US |
| Open-Meteo | Modeled weather history for field reports | Site coordinates rounded to about a kilometer; no names, accounts, or identifiers | EU |
| US National Weather Service | Official station-of-record observations for field reports | The same rounded coordinates; no identity | US (government service) |
| GitHub | Hosting for the public product demo only | No customer data; the demo runs on fictional sample data | US |
| Stripe | Payment processing, only for organizations that switch to card billing | Billing contact email, company name, and an internal organization reference; card details are entered on Stripe's hosted page and never reach our systems | US |
Billing. We currently invoice customers directly. Card billing through Stripe is provisioned but not open to customers yet; it is switched on per organization, and no card details are stored by us.
Apple. When the companion iOS, iPadOS, and macOS apps are distributed through the App Store, Apple handles app distribution only; workspace content and subscriptions do not flow through Apple.
Changes
Material additions or replacements are posted here before they take effect, and customer organizations are notified directly. Questions: [email protected].