Privacy
Service providers and subprocessors.
Updated October 5, 2026
Providers receive only the information relevant to their service function. Not every provider receives model or workbook content.
Customer Content subprocessors
These providers support processing on customers' behalf under our Data Processing Addendum. The information each provider receives depends on the features used. Sabrene operates from the United States. The table distinguishes BIMRelay's configured hosting and extraction regions from providers' broader delivery and processing operations; regional hosting alone does not limit all support, administration, or connected-service processing to that region.
| Provider | Function and information | Location information |
|---|---|---|
| Salesforce / Heroku | Backend application and database hosting; account, workspace, project, and operational information. | Europe: BIMRelay uses Heroku's European hosting region. Hosting regions; provider processing documentation. |
| Amazon Web Services | Object storage of uploaded files, processing artifacts, and generated deliverables. | Ireland: BIMRelay's S3 object-storage region is Europe (Ireland). Provider data privacy documentation. |
| Vercel Inc. | Website and application frontend hosting; request, device, security, and deployment information, and website submissions routed through its servers. | Global delivery network; request routing and processing depend on the service and visitor location. Network locations; provider processing terms. |
| OpenAI | Relevant project information for AI-assisted features, when enabled; Customer Content is not used to train models. | International processing under the provider's service arrangements. Regional storage and processing depend on the API project and features used. Provider data controls. |
| Autodesk Platform Services | Model extraction, staged file storage, translation, and viewing. Autodesk may separately control information in customers' own Autodesk accounts. | United States: BIMRelay's Design Automation extraction region. Other Autodesk processing depends on the connected service and source project. Provider privacy information. |
| Resend (Plus Five Five, Inc.) | Email addresses and content needed for account and service communications, which may contain project or collaborator details. | United States: primary processing operations identified in the provider's processing terms. |
| Cloudinary Ltd. and affiliates | Optional profile images and related delivery information; model and workbook files are not uploaded for profile-image hosting. | EU, United States, United Kingdom, Singapore, and Israel, as described in the provider's privacy information. |
Subprocessor changes follow the authorization, notice, and objection procedures in the DPA. Where a provider also processes information for its own lawful purposes, its separate privacy terms apply to that processing.
Contact hello@bimrelay.com for provider-contract details or transfer safeguards relevant to your use. Additional residency requirements must be agreed before affected information is submitted.
Connected services and other providers
These services also support independent transactions, customer-directed connections, or other operational and public website functions:
- Autodesk: customer-directed account connections, model services, processing, viewing, and publication, subject to the relevant Autodesk agreements.
- Stripe and Link: payments, billing, merchant-of-record transactions, and transaction support under the terms presented at checkout.
- Formspree: contact and waitlist submissions on the public website.
- Google Analytics: public website and consented application usage measurements as described in the Privacy Policy; no model or workbook contents are sent to Google Analytics.
The legal role depends on the specific processing, not merely this grouping. Customer-directed transfers to connected services still require appropriate authorization and safeguards. Sabrene remains responsible for its own processing and applicable provider agreements.