Subprocessor List
Appraiser Guru by Ergora LLC · Last Updated: February 2026
1. Overview
This Subprocessor List identifies all third-party services and providers ("Subprocessors") that process user data on behalf of Ergora LLC. A subprocessor is any external service that receives, stores, analyzes, or otherwise processes information from the Appraiser Guru platform on Ergora's behalf.
This list is maintained for transparency and compliance with data protection regulations, including GDPR and similar privacy laws.
2. Active Subprocessors
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account data, appraisal reports, files, session tokens | United States |
| Anthropic | AI processing (Claude LLM) | Report content, property data, images submitted for AI analysis | United States |
| Vercel | Web hosting, serverless functions, CDN | HTTP requests, IP addresses, usage logs | United States (global CDN) |
| Stripe | Payment processing, subscription billing | Payment method, billing address, transaction history | United States |
| Google (Maps/Geocoding) | Address geocoding, map display | Property addresses | United States |
| FEMA | Flood zone determination | Property coordinates | United States |
| OpenStreetMap | Map tiles, geographic data | Map viewport coordinates | Global |
3. Data Protection Agreements
3.1 DPA and Processing Terms
Ergora has established Data Processing Agreements (DPAs) or equivalent terms with all applicable subprocessors, complying with GDPR Article 28 and similar regulations. These agreements specify the scope and purpose of data processing, require appropriate security measures, restrict processing to specified purposes, require assistance with data subject rights requests, and include liability and indemnification clauses.
3.2 User Access to DPAs
Users who require copies of DPAs or have questions about data processing terms can contact support@ergora.ai.
4. Subprocessor Changes and Notifications
4.1 Addition of New Subprocessors
If Ergora engages a new subprocessor, we will provide notice at least thirty (30) days before it begins processing data, including the name, location, purpose, type of data processed, and your right to object (if applicable under law).
4.2 User Objection Rights
In jurisdictions where applicable law grants users the right to object to new subprocessors (such as under GDPR), users may object within a specified period. Ergora will either find an alternative subprocessor, modify processing to eliminate the need, or allow the user to terminate their account without penalty.
4.3 Removal of Subprocessors
If Ergora discontinues use of a subprocessor, we will notify users. Data held by removed subprocessors will be returned to Ergora or securely deleted per data protection agreements.
5. International Data Transfers
Most Ergora subprocessors are located in the United States. Transfers of personal data from the European Union or other jurisdictions with data protection regulations are governed by Standard Contractual Clauses (SCCs) or equivalent adequacy mechanisms, the subprocessor's commitment to international data protection standards, and Ergora's Data Processing Agreements.
Users in the EU or other data protection jurisdictions can contact support@ergora.ai for specific information about safeguards.
6. Security and Compliance
6.1 Security Requirements
All subprocessors are required to implement appropriate technical and organizational security measures, including: encryption in transit (TLS/HTTPS), encryption at rest, access controls and authentication, regular security audits and penetration testing, and incident response and breach notification procedures.
6.2 Compliance Certifications
Many Ergora subprocessors hold industry-standard certifications including SOC 2 Type II, ISO/IEC 27001, GDPR compliance, and PCI DSS (for payment processing). Current certification information is available from each subprocessor's website.
7. Third-Party Privacy Policies
Users should review the privacy policies of subprocessors to understand their independent data handling practices:
- Supabase: supabase.com/privacy
- Anthropic: anthropic.com/legal/privacy
- Google: policies.google.com/privacy
- Stripe: stripe.com/privacy
- Vercel: vercel.com/legal/privacy-policy
8. Contact and Updates
Ergora LLC
13750 Embers Ct
Plymouth, MI 48170
Phone: (734) 404-4716
Email: support@ergora.ai
This Subprocessor List is maintained in accordance with data protection regulations and updated as Ergora's technology partnerships evolve. Significant changes will be communicated to users via email.