HouseComply helps landlords, agents and social-housing providers manage property compliance. To run the Service we rely on a small number of trusted third-party providers — “sub-processors” — who may process personal data on our behalf, strictly under our instructions and under written data-protection terms.
We keep this list current. Where a sub-processor is located outside the UK, we put appropriate safeguards in place (see International transfers & safeguards). We only ever share the minimum data each provider needs to perform its function.
Current sub-processors
| Sub-processor | Purpose & data processed | Processing region |
|---|---|---|
| Supabase | Database, authentication and account file storage. | United Kingdom (London) |
| Airtable | Primary compliance-data store — inspections, properties, documents and compliance records. | United States (SCCs / UK Addendum) |
| Cloudinary | Storage and delivery of uploaded certificate documents and inspection photos. | United States (SCCs / UK Addendum) |
| Anthropic | AI-assisted reading of certificates and inspection photos to extract compliance information. Content is not used to train models and is retained only transiently. | United States (UK IDTA / Addendum + TRA) |
| Resend | Transactional and notification email (e.g. inspection links, account emails). | United States (SCCs / UK Addendum) |
| Make | Workflow automation between HouseComply systems. | European Union |
| Vercel | Application hosting and serverless compute. Processes data transiently in serving the app; no long-term storage of personal data. | United States (SCCs / UK Addendum) |
| Stripe | Subscription billing and payment processing. Card data is handled by Stripe directly. | United States & global (SCCs / UK Addendum) |
International transfers & safeguards
Some of our sub-processors are located outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards recognised under UK data-protection law — principally the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs), supported by a transfer risk assessment where required.
Our AI sub-processor operates under a no-training commitment, a UK IDTA for the international transfer, and bounded (transient) retention of the content it processes. This is consistent with the disclosure in our Privacy Policy.
Changes to this list
We will update this page whenever we add, remove or replace a sub-processor. Material changes affecting how personal data is processed will be notified in line with our Privacy Policy and any applicable data-processing agreement.
Contact
Questions about this list, our sub-processors, or a data-processing agreement can be sent to hello@housecomply.co.uk.