Sub-processors
Last updated: October 7, 2026
When a business or an organization uses a Buhata Space for its work, that organization decides what goes in it and Buhata processes it on their behalf. Under Article 28 of the GDPR they are entitled to know which other companies we use to do that, and to object before we add a new one. This page is that list.
If you use Buhata for yourself or your household, this page still tells you who touches your data, but the fuller account is in the Privacy Policy, which names every provider across the whole service rather than only the ones behind a Space.
Who we use for Space data
Each of these has a written data processing agreement with us that includes the Standard Contractual Clauses for transfers out of the EEA and the UK addendum for transfers out of the United Kingdom.
| Company | What it does for a Space | Where |
|---|---|---|
| Railway | Runs the server and the database, so it holds everything written in a Space | United States |
| Cloudflare | Serves the site and the app, and stores pictures and files shared in a Space | United States, global edge |
| Resend | Sends the mail a Space generates: invitations, sign-in codes, notices | United States |
| Sentry | Receives crash reports, which carry an error, a version and an account identifier | United States |
| Microsoft | Checks every picture and document shared in a Space against known child sexual abuse material through PhotoDNA before anybody can open it; it makes a fingerprint on our instruction and keeps no copy | United States |
| Anthropic | Runs the AI model, and reads only what a member’s own use hands it: a command the member said or typed on Premium that their device couldn’t resolve, a photo the member asks Buhata to read on Premium, and the numbers behind the Daily Brief’s overview on Plus and Premium, which inside a Team carry each member’s first name and last initial beside their open and finished tasks | United States; EEA and UK customers contract with Anthropic Ireland |
Stripe handles payment for a Space, but it processes the account holder's billing details rather than anything written inside the Space, and Buhata is the controller of that relationship. When a Team invoices its clients, the invoice is made on the Team’s own Stripe account, under the Team’s own agreement with Stripe. Plaid appears only where a person connects a bank for the Money tools, which is a personal feature and never part of a Space.
One company that is not a sub-processor
The Canadian Centre for Child Protection checks every picture and document shared inside a Space, through their Project Arachnid Shield service, before anybody can open it. They act as an independent controller of what we send rather than on our instruction, so they are not a sub-processor and their own rules apply alongside ours. We cannot turn this off for a Space and would not: a file nobody has checked is never shown to anybody. The Privacy Policy sets out what they keep and for how long.
Two services a member’s own device picks
Neither of these is on the list above, because the member’s phone or browser picks which one is used. The speech service turns what a member says into words before Buhata sees anything, and Buhata never receives the sound. It’s Google’s in Chrome and on most Android phones, where the recording can go to Google to be recognized, Apple’s in Safari and on Apple devices, and Microsoft’s in Edge. The push service carries a notification the member allowed, encrypted so that only their device can read it, and it’s Google’s for Chrome, Apple’s for Safari, Mozilla’s for Firefox and Microsoft’s for Edge. A member who never uses the microphone and never allows notifications doesn’t meet either one.
Telling you before we add one
We give notice before a new sub-processor starts handling Space data, and you can object. Write to [email protected] with the name of your Space and we will add you to the notice list. If you object and we cannot offer an alternative, you can end your subscription for that Space and we will refund the unused part of the period.
Questions about this page go to [email protected]. Questions about your own personal data go to [email protected].