Sub-processors
Last updated: September 6, 2026
When a business or an organization uses a Buhata Space for its work, that organization decides what goes in it and Buhata processes it on their behalf. Under Article 28 of the GDPR they are entitled to know which other companies we use to do that, and to object before we add a new one. This page is that list.
If you use Buhata for yourself or your household, this page still tells you who touches your data, but the fuller account is in the Privacy Policy, which names every provider across the whole service rather than only the ones behind a Space.
Who we use for Space data
Each of these has a written data processing agreement with us that includes the Standard Contractual Clauses for transfers out of the EEA and the UK addendum for transfers out of the United Kingdom.
| Company | What it does for a Space | Where |
|---|---|---|
| Railway | Runs the server and the database, so it holds everything written in a Space | United States |
| Cloudflare | Serves the site and the app, and stores pictures and files shared in a Space | United States, global edge |
| Resend | Sends the mail a Space generates: invitations, sign-in codes, notices | United States |
| Sentry | Receives crash reports, which carry an error, a version and an account identifier | United States |
| Microsoft | Checks every picture and document shared in a Space against known child sexual abuse material through PhotoDNA before anybody can open it; it makes a fingerprint on our instruction and keeps no copy | United States |
| Anthropic | Turns the minority of spoken sentences the device cannot resolve into text, only when a member uses voice | United States; EEA and UK customers contract with Anthropic Ireland |
Stripe handles payment for a Space, but it processes the account holder's billing details rather than anything written inside the Space, and Buhata is the controller of that relationship. Plaid appears only where a person connects a bank for the Money tools, which is a personal feature and never part of a Space.
One company that is not a sub-processor
The Canadian Centre for Child Protection checks every picture and document shared inside a Space, through their Project Arachnid Shield service, before anybody can open it. They act as an independent controller of what we send rather than on our instruction, so they are not a sub-processor and their own rules apply alongside ours. We cannot turn this off for a Space and would not: a file nobody has checked is never shown to anybody. The Privacy Policy sets out what they keep and for how long.
Telling you before we add one
We give notice before a new sub-processor starts handling Space data, and you can object. Write to [email protected] with the name of your Space and we will add you to the notice list. If you object and we cannot offer an alternative, you can end your subscription for that Space and we will refund the unused part of the period.
Changes
This page carries the date it was last changed, at the top. The list below records what changed and when, so you can see the history rather than take our word for the current state.
- September 3, 2026: first published.
Questions about this page go to [email protected]. Questions about your own personal data go to [email protected].