Sub-Processors

Effective: 28 September 2026

This page lists the third-party providers ("sub-processors") we use to process personal data on behalf of our customers, as described in our Data Processing Agreement. For each, we show who they are, what they do for us, and where they are based.

Current sub-processors

• Convex, Inc. (US): cloud database and backend hosting. Customer data is hosted in the EEA (Ireland).
• Vercel, Inc. (US): web application hosting and analytics.
• Clerk, Inc. (US): authentication and user accounts.
• AI processing is carried out by one or more of the following, depending on the model in use: OpenAI, L.L.C. (US); Anthropic, PBC (US); Microsoft Corporation (US, Azure OpenAI Service); Amazon Web Services, Inc. (US, Amazon Bedrock); and Google LLC (US, Vertex AI).
• Plus Five Five, Inc. (Resend) (US): email delivery.
• Expedited Security LLC (DocRaptor) (US): PDF generation.
• Functional Software, Inc. (Sentry) (US): error monitoring. Data is hosted in the EU (Germany).

Where a provider processes personal data outside the UK, we rely on a recognised transfer safeguard, as described in our Privacy Policy and Data Processing Agreement.

Providers we use for enquiries and marketing

When you contact us or ask for a demonstration, we are the controller of your details and use providers in these categories to handle them:

• Customer relationship management (UK provider, data hosted in the EU).
• Demonstration scheduling (US provider).
• Video calls and calendar invitations for demonstrations (US provider).
• Email delivery (US provider).

Changes to this list

We will update this page and notify organisation administrators (organisations are called workspaces in the app), for example by email or a notice in the Service, before we add or replace a sub-processor. If you have a reasonable data protection objection to a change, contact us at hello@auro.build and we will work with you to resolve it.