Sub-processors

Who else handles data

When a surveyor drafts a report with Surveyor AI, we act as a processor for the property and client information in that report. To run the service we use a small number of other companies. This page names every one of them, what they do, and where they do it.

Last updated 23 September 2026

SupabaseDatabase and authentication — accounts, surveys, report text, inspector notesAccount details, report content, property addresses, client names entered by the surveyorEU (Ireland)
Cloudflare R2Storage of survey photographs, videos and uploaded documentsInspection photographs and any files the surveyor uploadsEU (Western Europe)
VercelApplication hosting — the software itself runs hereData in transit while a page or request is being servedUK (London)
AnthropicDrafting report narrative, analysing inspection photographs, writing photo captionsPhotographs, inspector notes and property details for the survey being draftedUnited States
OpenAITranscribing dictated voice notes; standby for report drafting during an Anthropic outageVoice recordings the surveyor dictated, and the same survey content when the standby is usedUnited States
Google Cloud (Vision)Object and label detection on inspection photographsInspection photographsUnited States
Google Maps and PlacesAddress lookup and the map on the dashboardProperty addresses and postcodesUnited States
StripeSubscription billing and paymentsBilling contact and payment details — card numbers are handled by Stripe, never by usEU and United States
ResendTransactional email — invitations, reminders, draft-ready notificationsEmail address and the contents of that messageUnited States
Ideal PostcodesAddress autocomplete in the survey wizardsPartial addresses and postcodes typed by the surveyorUnited Kingdom
Cloudflare TurnstileBot protection on sign-in and sign-upTechnical signals from the browser; no survey contentGlobal (Cloudflare network)

Transfers outside the UK

Your reports and photographs are stored in the EU, which the UK recognises as providing an adequate level of protection. The AI providers above are based in the United States; those transfers are covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. None of these providers trains AI models on data submitted through their APIs.

When this list changes

We will update this page before a new sub-processor starts handling customer data, and email account holders when we do. If your firm objects to a new sub-processor, tell us and we will work through it with you, including ending your subscription and returning your data if no alternative works.

Public data sources

Surveyor AI also looks up published information about a property. These services receive a postcode or an address — never a person's name, the report, or its photographs — so they are not sub-processors of personal data. They are listed here for completeness.

  • publicEPC Register (Department for Energy Security and Net Zero) — energy certificate for an address
  • publicEnvironment Agency — flood risk for a location
  • publicBritish Geological Survey — ground stability and radon for a location
  • publicOpenAQ — air quality near a location
  • publicHistoric England — listed building status for a location
  • publicpostcodes.io — postcode lookup

See also our Data Processing Addendum and AI due diligence. Questions about anything on this page? Contact us.