To support delivery of our Services, BuildingTransparency may engage and use data processors ("Subprocessors") with access to certain personal information. This page provides important information about the identity, location and role of each Subprocessor we use.
Terms used on this page, but not explicitly defined, have the meaning outlined in our Terms of Service, Privacy Notice, and any direct contract with you, the customer.
The information shared here is for disclosure purposes to demonstrate how BuildingTransparency engages with third-party systems, specifically which providers we use as part of delivering services to you. It should not be interpreted as offering any additional rights or binding agreements.
About Subprocessors
A subprocessor is an external service or provider that is enlisted by BuildingTransparency to deliver our service to you. As part of that service delivery, we may be required to share personal information we have collected about you with these providers, subject to our Privacy Notice, Terms of Use.
We take the privacy and security of your personal data very seriously and have strict processes in place to ensure this information is shared securely and only when necessary.
Personal information: We employ Secure Socket Layer (SSL) technology on the collection, storage and processing of all data. All accounts are accessed via secure login with one-way hashing of all passwords. We do not access or share any data unless required to by law or with your permission to help resolve system problems.
Payments: We do not collect payment information in EC3 or any other web service.
BuildingTransparency requires that any third-party services or subprocessors, that we use as part of delivering this service to you, meet the requirements and obligations under GDPR, as well as those requirements of local authorities.
Third parties (Subprocessors)
Infrastructure Subprocessors
These are providers who supply core services that enable BuildingTransparency to provide software services under a data processing agreement. Each of these provides a range of essential services.
| Entity Name | Purpose | Entity Country |
| C Change Labs Inc | Software Developer | Canada, Ukraine |
| Amazon Web Services, Inc. | Cloud Service Provider | United States |
| Microsoft Corporation (Microsoft Azure) | Cloud Service Provider | United States |
| Google Inc. | Cloud Service Provider | United States |
Service Specific Subprocessors
Timely works with other third-parties to provide specific functions or features within BuildingTransparency's products. These providers will have access to relevant personal information (both in an identifiable and anonymous manner) in order to provide their relevant functions. The use of information is limited to the specific purposes we've detailed below:
| Entity Name | Purpose | Entity Country |
| Box.com | Shared storage of management reports | United States |
| SendGrid, Inc | Cloud-based Email Notification Services | United States |
| Heroku | Web hosting for tallyLCA | United States |
| Asana, Inc | Cloud-based Issue Tracking Services | United States |
| Usersnap, Inc. | Cloud-based Customer Support Services | Austria |
Add on integrations
The following subprocessors are third-parties that we offer optional integrations with. Relevant customer data and personal information will be shared with these services if you specifically enable them and authorize the sharing.
BuildingTransparency.org offers a public API, so this list is necessarily a partial one.
| Entity Name | Purpose | Entity Country |
| Autodesk | Cloud-based construction data storage and sharing | United States |
| Procore | Cloud-based construction data storage and sharing | United States |
| RIB Software | Cloud-based construction data storage and sharing | Germany, India |
| Cove.tool | Cloud-based energy analysis | United States |
Changes and updates
As our services grow and evolve, the third-parties and subprocessors that we engage with may also change over time. We will provide the account owner with notice of any changes by sending a notification to the registered account holder's email address, along with posting any changes here. Please check back here to stay in the loop.
--
update: 2023-05-17 : Publication