Subprocessors
Effective July 29, 2026
These are the third-party providers that help us operate ROM Estimator and The Project Manager, and what each one touches. We keep this list short on purpose.
| Provider | What it does | What it processes | Region |
|---|---|---|---|
| Supabase | Managed database, authentication, and file storage | Account information, workspace content, files, audit and error records | AWS, western US |
| Cloudflare | Site and app hosting, CDN and TLS, email routing for our mailbox, cookieless site analytics | HTTP request metadata, contact-form messages in transit, coarse pageview counts | Global edge, US origin |
| Anthropic | Optional AI features only: RFP intake and basis-of-estimate narrative drafting | The text a user submits to those two features, only when invoked; not used to train models under the API terms we use | US |
| Open-Meteo | Observed-weather history for field reports | Site coordinates rounded to about a kilometer; no names, accounts, or identifiers | EU |
| US National Weather Service | Official station-of-record observations for field reports | The same rounded coordinates; no identity | US (government service) |
| GitHub | Hosting for the public product demo only | No customer data; the demo runs on fictional sample data | US |
Billing. We currently invoice customers directly and do not process card payments. Before any card billing is enabled, the payment processor will be added to this list.
Apple. When the companion iOS, iPadOS, and macOS apps are distributed through the App Store, Apple handles app distribution only; workspace content and subscriptions do not flow through Apple.
Changes
Material additions or replacements are posted here before they take effect, and customer organizations are notified directly. Questions: [email protected].