JobsitePilot

Subprocessors

Last updated: August 31, 2026

JobsitePilot uses the following providers to deliver the Service. The data handled depends on the feature used and the customer's configuration. Provider infrastructure and support access may involve additional countries and downstream providers under the provider's own data-processing terms.

ProviderPurposeRelevant dataPrincipal processing location
Supabase, Inc.Managed database, file storage and user authenticationAccount/profile data, project records, reports, photos, authentication and technical dataUnited States and configured infrastructure region
OpenAI Ireland Limited and/or OpenAI, L.L.C.AI processing for report generation, English voice transcription and related assistanceTemporary voice recordings submitted for transcription, field-note text, report context, requested input and generated outputEuropean Economic Area and/or United States, depending on the applicable account and service configuration
Render Services, Inc.Application hosting, networking and runtime infrastructureService requests, IP address, headers, application traffic, logs and transient Customer Content handled by the applicationUnited States and selected hosting region
Resend, Inc.Transactional and report email deliveryRecipient and sender addresses, subject, message content, report attachment and delivery eventsUnited States
Stripe Payments Europe, Limited and Stripe group companiesCheckout, subscription administration, invoicing and payment processingBilling contact, plan, subscription, transaction and payment informationEuropean Economic Area, United States and other Stripe service locations
Open-Meteo weather and geocoding APIsLocation lookup and automatic weather data requested for a reportLocation search text or coordinates; no account password, field-note text, photos or report bodyProvider infrastructure locations
Payment role. Stripe may act as an independent controller for some payment, fraud-prevention and legal-compliance processing under its own privacy terms.

International-transfer safeguards

Where a transfer subject to GDPR, UK GDPR or comparable law is made to a country without an applicable adequacy decision, JobsitePilot relies on contractual and other safeguards made available by the relevant provider, such as the European Commission's Standard Contractual Clauses or the UK Addendum, as applicable.

Changes and objections

This page will be updated before a material new Subprocessor begins processing Customer Personal Data where reasonably practicable. A customer may object on reasonable data-protection grounds within 15 days after notice or publication by emailing hello@getjobsitepilot.com.