Sub-processors
Material changes are notified by email to organisation admins at least 30 days in advance.
PropDev OS (operated by K-Map Studio Ltd) uses the following third-party processors to deliver the service. Each is bound by its own Data Processing Agreement and only receives the data categories listed below.
| Processor | Purpose | Data categories | Region | Transfer basis |
|---|---|---|---|---|
| Supabase | Primary database, authentication, file storage | Account, organisation, project, banking, chat, files | EU (eu-west-2, London) | EEA — no transfer; UK adequacy decision applies |
| Vercel | Application hosting, edge network, build pipeline | Application logs, request metadata | Multi-region (UK edge: London lhr1) | UK IDTA (Vercel is US-incorporated) |
| Stripe | Payment processing, subscription billing | Billing email, payment method (card data never touches our servers), invoices | EU (Ireland) + US | UK IDTA / EU SCCs |
| Anthropic | AI assistant (Vera) — language model API for chat responses and summaries | Prompts, project context shared with Vera, generated responses | US | UK IDTA. No-training flag enabled on all API calls. |
| OpenAI | AI assistant (selected Vera tasks where explicitly indicated) | Prompts, project context, generated responses | US | UK IDTA. No-training flag enabled on API calls. |
| TrueLayer | Open Banking connections — read-only transaction sync | Bank account metadata, transaction history (with explicit user consent) | UK | UK — no international transfer |
| Sentry | Error monitoring and performance telemetry | Stack traces, sanitised request paths, browser/OS metadata | EU (Frankfurt) | EEA — no transfer; UK adequacy decision applies |
| Resend | Transactional email (signup verification, DSAR acknowledgements, sub-processor change notices) | Recipient email, message content | US | UK IDTA |
How we notify changes
When we add, remove, or change a sub-processor we email all organisation owners and admins. Customers have 30 days to object before the change takes effect.
How to object
To object to a sub-processor change or to ask questions about any processor listed above, contact privacy@propdev-os.com.