Sub-processors

This register is generated from the product's integration configuration so it cannot silently drift. Acess Limited, trading as Quantifiable (company number 16890479) is the controller or processor as the privacy notice and data processing terms describe.

• Clerk (tenant-app instance) — Authentication and session management for workspace members. Location: United States / EU (Clerk).
• Clerk (client-portal instance) — Authentication and session management for portal users. Separate Clerk application; sessions are never shared with the tenant app. Location: United States / EU (Clerk).
• Neon — Postgres database, including tenant-isolated application data. Location: AWS eu-west-2 (London).
• Vercel — Application hosting, serverless functions, and Blob object storage for hot files. Location: Vercel / AWS regions used by the project.
• Vercel AI Gateway — Routes model calls. Tenant prompts and drawings pass through the Gateway to the model providers below. Location: Vercel.
• Anthropic — Claude models for complex reasoning and routine structured output. Location: United States.
• Google — Gemini models for vision-heavy takeoff analysis and, since CR-17, the research tier: grounded web search (Google Search) that judges material matches and reads product datasheets. Research prompts carry a requirement description, a candidate item's description and unit, and public product facts — never a price, project name or firm identifier. Location: United States.
• OpenAI — text-embedding-3-small embeddings for cost-item retrieval. No prices are sent. Location: United States.
• Tavily — Bounded web research for physical product facts (a section size, a pack coverage). Queries carry a product description and unit, never a price, project name or firm identifier. Location: United States.
• Cloudflare R2 — Object storage for large drawings and PDFs. Location: Cloudflare (EU-preferred bucket).
• Stripe — Subscription billing for Quantifiable seats. Location: United States / EU (Stripe).
• Stripe Connect — Tenant-receives-payment: firms invoice their own clients. Separate from platform subscription billing. Location: United States / EU (Stripe).
• Resend — Transactional email, including inbound project threading. Location: United States / EU (Resend).
• Twilio — Transactional SMS to portal users, opt-in only. Location: United States / EU (Twilio).
• Inngest — Background job orchestration. Job events carry a tenant id so the handler can re-enter tenant context; they do not carry priced estimate lines. Location: United States / EU (Inngest).
• Sentry — Error monitoring. Event payloads are scrubbed of secrets. Location: United States / EU (Sentry).
• PostHog — Product analytics. Browser SDK uses memory persistence only — no analytics cookies and no analytics entries in localStorage. Location: EU (eu.i.posthog.com).
• Xero — Optional accounting sync for a firm that connects its own Xero organisation. Location: Australia / United States (Xero).
• Google Calendar — Optional two-way calendar sync for a member who connects their Google account. Location: United States (Google).
• AI Merchant (Builders Megastore POS) — Weekly supplier price feed for the Master Price List, read over AI Merchant's MCP server through a confirmed read-only tool catalogue. Quantifiable READS product names, SKUs, trade prices and stock status; it sends only page cursors, SKUs and a price tier — never tenant data. Location: United Kingdom / EU (AI Merchant).
• WooCommerce (Builders Megastore storefront) — Fallback supplier price feed for the Master Price List when the AI Merchant server is unavailable, read with a read-only REST key. Product names, SKUs and prices are read; nothing is written and no tenant data is sent. Location: United Kingdom (the store's own hosting).

A change to this list is a new document version. Questions: privacy@quantifiable.co.uk.