Sub-processors
Last updated: 4 September 2026. These are the companies that process data on our behalf so BrokerDIY can work. Most vendors make you email support for this list. We publish it, because a list you have to ask for is not a disclosure.
Every provider below is bound by a written agreement that limits them to providing their service to us. None of them may use your content for their own purposes, and none of them may train their general-purpose models on it. This page is referenced by our Privacy Policy and forms part of our data processing terms.
Platform sub-processors
These may touch information inside a brokerage’s account.
| Provider | What it does for us | What it can see | Processing location |
|---|---|---|---|
| Hostinger International Limited | Hosting and infrastructure for the platform, the website and our databases | Everything stored on the platform, at rest on their hardware | United States (Boston, MA) |
| Anthropic PBC | The AI models behind our assistants, voice agents and document intelligence | The content of a request at the moment it is processed — the text or transcript you or the feature sends | United States |
| Twilio Inc. | Placing and receiving telephone calls, and sending and receiving SMS | Phone numbers, message contents, call metadata and audio in transit | United States |
| Stripe, Inc. | Taking payment and managing subscriptions | Billing name, email, address and card details. Card numbers go to Stripe directly and we never receive or store them | United States |
| Google LLC | Outbound transactional email — signing requests, notices, receipts — through the Google Workspace SMTP relay | Recipient addresses and the contents of the emails we send on your behalf | United States |
Website and internal tooling
These never touch a brokerage’s account. We list them so the picture is complete.
| Provider | What it does for us | What it can see | Processing location |
|---|---|---|---|
| Google LLC (Analytics, Fonts) | Visitor analytics and web fonts on this marketing website only | Website visits. Advertising and audience-signal features are switched off | United States |
| Firecrawl | Retrieving public web pages when a research feature is asked to read one | The public URL requested. No account data and no client information | United States |
| Google LLC (Gemini) | An internal research tool that analyses public video and channel URLs for our own market research | Publicly available media we choose to submit. No customer or client data reaches it | United States |
What we run ourselves
A shorter sub-processor list is not an accident. These parts of the platform run on our own servers, which means no third party is involved in them at all:
- Your database. PostgreSQL on our own infrastructure. There is no third-party database service holding your transactions.
- Real-time voice transport. Our own LiveKit deployment, not a hosted voice cloud.
- Local AI inference. A number of features run on models we host ourselves, so those requests leave no network at all.
- Marketing email and social scheduling. Self-hosted, so your contact lists are not loaded into a third-party sending platform.
- Electronic signature and the verification ledger. Entirely ours. There is no e-signature vendor behind BrokerDIY Sign, which is why an executed PDF verifies without us.
What is deliberately not on this list
If you connect BrokerDIY to a service you hold the account with — a CRM such as Lofty or Follow Up Boss, a transaction service such as Dotloop, your MLS or IDX feed, your Google Workspace, your advertising accounts — that service is not our sub-processor. You chose it, your agreement governs it, and data you push to it is handled under their terms rather than ours. We tell you what a connection sends before you switch it on.
Changes, notice, and your right to object
- We update this page before a new sub-processor starts processing your data, not after.
- Customers on a data processing agreement get 30 days’ notice by email of a new or replaced sub-processor.
- You may object on reasonable data-protection grounds within those 30 days. We will work with you to find an alternative, and if we cannot, you may cancel the affected part of the service and we will refund fees you have paid for the period after cancellation.
- We may add a sub-processor immediately where it is needed to keep the service running or secure, and we will tell you as soon as we do.
To be told when this page changes, or to ask for our data processing agreement, write to us through our contact page.