Sub-processors

These are the providers we use to process personal data in your firm's data, as authorised in section D of the data processing agreement in our customer terms.

• Replit

  What it does: Hosts and runs the Construct365 application.

  Where it processes data: Replit's hosting infrastructure; the region is set by Replit's deployment service, not by our configuration.

• Neon

  What it does: Hosts the PostgreSQL database that holds your firm's data.

  Where it processes data: Frankfurt, Germany (AWS region eu-central-1), as set in our database configuration.

• Replit App Storage

  What it does: Stores uploaded files and generated documents, such as site photos and issued PDFs.

  Where it processes data: Replit's object storage service (backed by Google Cloud Storage); the location is set by the storage bucket Replit provides.

• Amazon Web Services (Amazon SES)

  What it does: Delivers email that Construct365 sends, such as invitations, notifications and issued documents.

  Where it processes data: London, United Kingdom (AWS region eu-west-2), as set in our email configuration.

• Stripe

  What it does: Takes subscription payments and holds billing details. Card details go to Stripe, not to us.

  Where it processes data: Stripe's own infrastructure; Stripe may process data outside the UK under its own transfer safeguards.

• Xero (optional)

  What it does: Only if your firm connects it: sends to and reads from your Xero organisation the information the connection uses.

  Where it processes data: Xero's own infrastructure, in the region of your Xero organisation.