Legal · Data processing
Sub-processors
Last updated: 29 August 2026
To provide ScaffQuote, Bond Labs Limited (trading as ScaffQuote) engages the providers below to process personal data on our behalf. Each is engaged under their standard terms, including a data processing agreement where they offer one.
Current sub-processors
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Anthropic | AI photo-measurement and job-description parsing | United States | SCCs / UK IDTA |
| fal.ai | Photoreal scaffold image generation (when you request a render) | United States | SCCs / UK IDTA |
| Gemini image model, invoked via fal.ai when you request a photoreal render | United States | SCCs / UK IDTA | |
| Supabase | Database, authentication, and photo/file storage | London, United Kingdom (eu-west-2) | In-region (UK/EU) |
| Vercel | Application hosting and content delivery | United States / global | SCCs / UK IDTA |
| Resend | Transactional email (quotes, sign-in codes) | United States | SCCs / UK IDTA |
“SCCs / UK IDTA” = EU Standard Contractual Clauses with the UK International Data Transfer Addendum, where data is transferred outside the UK. We do not currently use a payments processor; card data is not collected by ScaffQuote. If billing starts, Stripe (and on native apps, RevenueCat) will be listed here before any charge.
Changes
As ScaffQuote evolves we may add or change sub-processors. We will update this page and the “Last updated” date. For how this fits our wider data handling, see our Privacy Policy. Questions? Email privacy@scaffquote.com.