These are the providers we use to run NODRO, what each one handles, and where. We have a contract with each that protects your data, and we tell businesses before we add or change one.
Who processes data for us
| Provider | What for | What it handles | Where |
|---|---|---|---|
| Neon | The database | Everything a business keeps as text: customers, sites, equipment, jobs, notes, reports, team accounts | Frankfurt, Germany (European Union) |
| Amazon Web Services (S3) | File storage | Photos, customer signatures, voice notes and business logos | Frankfurt, Germany (European Union) |
| Render | Runs the NODRO servers | Everything passes through while it is processed; it is not kept there | To be confirmed |
| Vercel | Hosts the website and the app’s screens | The pages themselves; no business records are stored | Global network, built in the United States |
| GitHub | Holds our software and a nightly backup of the database | The backups are encrypted with a key only we hold, and kept for 30 days | United States |
| Sentryonly if switched on | Finding and fixing software errors | Error details only. Customer, equipment and job details are removed before anything is sent | To be confirmed |
| Resendonly if switched on | Sending email from NODRO, such as report links and alerts. Not set up yet: it needs our own email domain first | The recipient’s email address and the message being sent | To be confirmed |
| Anthropiconly if switched on | Drafting a service report from a job’s records, when a technician asks for a draft | The notes, parts and voice-note text of that one job | United States |
| A speech-to-text providerto be confirmed | Turning voice notes into text | The voice note being transcribed | To be confirmed |
“Only if switched on” means we do not use that provider unless a feature is turned on; “to be confirmed” means we have not chosen yet and will update this page, and tell businesses, before we do.
How changes work
We tell businesses at least 14 days before we add or replace a sub-processor, so they can object, as set out in our Data Processing Agreement. The date at the top shows when this list last changed. See also our Privacy Policy.