Sub-processors
The companies that process personal data for Acraft, what they receive and where.
Last updated 21 October 2026
Current providers
| Provider | What for | Data | Where | Transfer safeguard |
|---|---|---|---|---|
| Hostinger International Ltd | Servers: application, database, file storage, error tracking, analytics | All account and workspace data | France (Paris) | UK adequacy (EU/EEA) |
| Cloudflare, Inc. (R2) | Encrypted database backups, kept 30 days | All account and workspace data in the database | European Union / United States | Cloudflare's data processing agreement (EU standard contractual clauses and the UK Addendum) and the Data Privacy Framework |
| Ollama Inc. (Ollama Cloud) | AI model (Gemma): assistant, quote drafting, reading photos and documents | Text, photos and documents sent to the AI, with the workspace details needed to answer | United States (may route to EU or Singapore) | No signed transfer agreement yet. The provider states that prompts are not stored and not used for training |
| Paper Instruments (Ultramarine model) | AI model: quote drafting steps | Quote briefs and the workspace details needed to price them | United States (the provider does not name a hosting region) | The provider's terms provide for a data processing agreement signed with each customer; ours has been requested and is not signed yet. Its policy refers to the EU standard contractual clauses and their UK equivalent, available on request. It states that it does not train on API inputs or outputs |
| Groq Inc. | AI model: short titles for jobs and conversations | The first message of a conversation or a job description | United States | The provider publishes a data processing addendum with the EU standard contractual clauses and the UK Addendum, which we have yet to accept |
| Mistral AI | AI model (Voxtral): voice notes to text | Voice recordings | France | UK adequacy (EU/EEA) |
| DeepInfra Inc. | Speech to text for videos (Whisper) | The audio track of videos you upload | United States | No signed transfer agreement yet. The provider states that inputs are kept in memory only and not used for training |
| TypeSafe (Jev) | Short yes/no checks on assistant messages | Assistant messages | United States (stated by the provider) | The provider's data processing agreement, part of its customer agreement, applies the EU standard contractual clauses (controller to processor) and the UK Addendum. It states that it does not train on our inputs |
| Brevo (Sendinblue SAS) | Sending emails: sign-in, quotes, invoices, reminders | Email addresses, names, email content and attached documents | France | UK adequacy (EU/EEA) |
| Stripe Payments Europe Ltd | Subscription billing | Billing name, email, address, VAT number; card details go to Stripe only | Ireland / United States | UK adequacy (EU/EEA) for the Irish entity; Stripe's data processing agreement (EU standard contractual clauses and the UK Addendum) for transfers to the United States |
| OpenStreetMap Foundation (Nominatim) | Turning addresses into map positions | Client and site addresses (no names) | United Kingdom | UK |
| OpenFreeMap | Map tiles in the phone app | IP address of the phone (no names or addresses) | European Union | UK adequacy (EU/EEA) |
| Expo (650 Industries, Inc.) | Delivering updates to the phone app | IP address, app version and device model | United States | The provider states that it is certified under the Data Privacy Framework and its UK extension |
| Google LLC | Sign in with Google, only if you choose it | Name, email, profile picture | United States | Google's data processing terms, which apply standard contractual clauses |
| Xero Ltd | Accounting sync, only if you connect it | Invoices, client contacts, payments | United Kingdom / Australia / United States | Your own agreement with Xero |
Changes to this list
We update this page at least 30 days before a new provider starts receiving your clients’ personal data, except in an emergency to keep the service running. If you object to a new provider, write to chill.studio.dev@gmail.com; if we cannot address it, you can close your account and we refund the unused part of your subscription.