Subprocessor List
Last updated November 2, 2026.
These companies process information on our behalf to provide the Grudar Service and website. This list covers grudar.com and Grudar for Architects, our scan product. Each processes that information to provide its services to us, under its own terms. When we add or replace a subprocessor, we update this page and its date.
Hosting and infrastructure
| Company | What it does for us | Information it receives | Location |
|---|---|---|---|
| Supabase, Inc. (on Amazon Web Services) | Database, sign-in, and file storage | All account information and Customer Content we store, the waitlist, and sign-up post tags | United States (AWS us-east-1) |
| Render Services, Inc. | Runs our application servers, background workers, our virus scanner, and our public website | All information passing through the Service, including waitlist submissions, and server logs (including IP addresses, user and company identifiers, and email addresses and search terms that appear in logs) | United States |
| Vercel Inc. | Hosts the Grudar web application that runs in your browser | Your browser's requests to load the app (IP address, browser details) | United States |
| Google LLC — Google Fonts | Serves the fonts used by the Grudar web application | Your browser's requests to load the fonts (IP address, browser details) | United States and other countries |
AI and document processing
| Company | What it does for us | Information it receives | Location |
|---|---|---|---|
| Anthropic, PBC | Main AI provider: reads documents, drawings and photos for scans; writes reports; powers the assistant | Document text and page images, drawings, photos (with their embedded metadata), project details (name, address, owner, type), assistant messages and voice transcripts, public information found during a scan | United States |
| Google LLC — Gemini API | First-choice model for analyzing site photos; backup model for scan steps when Anthropic is unavailable | Site photos as uploaded (can include GPS location and capture time) with project details; on backup, the same scan text Anthropic would have received | United States and other countries |
| Google LLC — Cloud Vision API | Reads text from scanned (image-only) document pages | Images of scanned document pages | United States and other countries |
| OpenAI, L.L.C. | (1) Search indexing ("embeddings") of documents and assistant conversations; (2) backup model for the assistant; (3) voice dictation transcription; (4) live voice conversations | (1) Document and conversation text, and scan findings; (2) assistant conversation and project context; (3) short audio clips plus a list of your project, customer and vendor names to improve accuracy; (4) live audio and transcripts with project context | United States |
| X.AI LLC (xAI) | Backup model when both Anthropic and Google are unavailable | The same scan text, and in rare cases photos, the main provider would have received | United States |
| Deepgram, Inc. | Speech-to-text for voice features | Live microphone audio, plus up to 10 project, customer and vendor names to improve accuracy, and your company's internal ID as a usage tag | United States |
Search and maps
| Company | What it does for us | Information it receives | Location |
|---|---|---|---|
| Brave Software, Inc. — Brave Search API | Web search during scans (property, permit and project-owner research) and when you ask the assistant to search the web | Search terms, which can include the project's site address, city, county, project name and owner name | United States |
| Google LLC — Maps Platform (Places) | Address suggestions as you type a project or company address | The partial address you type | United States and other countries |
Payments, email and monitoring
| Company | What it does for us | Information it receives | Location |
|---|---|---|---|
| Stripe, Inc. | Card payments for scan credit | Company name, billing email, our internal company ID and what was bought; you enter card details directly on Stripe's page | United States |
| Resend (Plus Five Five, Inc.) | Sends service emails (report ready, team invitations) | Recipient email address, and the email's subject and content | United States |
| Twilio Inc. (SendGrid) | Backup email delivery, used only if our main email provider cannot send | Recipient email address, and the email's subject and content | United States and other countries |
| Google LLC — Google Workspace | Our support mailbox (support@grudar.com) | Emails you send to support@grudar.com, including your email address and anything you write or attach, and our replies | United States and other countries |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | Error details and application log lines, which can include user and company identifiers, IP addresses, email addresses and search terms; masked screen recordings around an error, and page-performance timings from the app; never request bodies or passwords | United States |
Sign-up confirmation emails are sent by Supabase's authentication service (first row).