Sub-processors
Last updated October 12, 2026
BLD uses the following service providers ("sub-processors") to run BLD. Each one processes personal data only on our behalf, under written data protection terms, and only for the purpose listed. None of them may sell your data or use it for their own advertising.
Authorized sub-processors
| Company | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Application hosting, databases and file storage (S3) | All account, profile, project and uploaded file data | United States (Ohio, us-east-2) |
| Okta, Inc. (Auth0) | Sign-in and identity management | Name, email address, password credentials, sign-in events | United States |
| Twilio Inc. | SMS verification codes and text notifications | Mobile number, message content | United States |
| Twilio Inc. (SendGrid) | Transactional email delivery | Name, email address, message content | United States |
| Cloudflare, Inc. | Web application delivery and network security | IP address, device and request data | United States (global edge network) |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | Technical error data, which may include user identifiers | United States |
| Mapbox, Inc. | Maps, address search and geocoding | Searched addresses, map locations, IP address | United States |
| Google LLC | Optional Google sign-in and Street View previews | Name, email address and profile basics (sign-in); viewed locations (Street View) | United States |
| OpenStreetMap Foundation (Nominatim) | Fallback address lookup when map search is unavailable | Searched addresses and ZIP codes | United Kingdom |
Surveyors and clients
Surveyors and clients who receive project information through the marketplace are independent BLD users, not sub-processors. They only see what is needed for a project and are bound by our Terms of Service (for Clients or Surveyors) and Non-Disclosure Agreement (for Clients or Surveyors).
Changes to this list
We give reasonable advance notice by updating this page before a new sub-processor starts processing personal data. Business customers may object in writing on reasonable data protection grounds within a reasonable period after the update, as described in the Data Processing Agreement. To receive change notices by email, write to support@bld.online.