Trust Center
Your drawings, pricing, and proposals stay yours.
Here is how Folio handles customer data: who can see it, which vendors process it, what they do with it, and how to get it deleted.
Subprocessors
The infrastructure vendors that process Folio customer data, what each one does, and what it receives.
| Vendor | Purpose | Data retention |
|---|---|---|
 Google LLC (Cloud Run) | Application hosting | Stateless compute. Retention terms under review. |
 Supabase, Inc. | Database and file storage | Stores your organization’s data. Retention terms under review. |
 Inngest, Inc. | Background job orchestration | Receives data for background jobs. Retention terms under review. |
 Tiptap GmbH (Tiptap Cloud) | Storage and editing of preconstruction documents | Retention terms under review. |
 Resend, Inc. | Transactional email: login codes, team and bid invites, reports, and approvals | Retention terms under review. |
 PostHog, Inc. | Product analytics, application logs, error tracking, and request monitoring | Receives usage events, application logs, and request traces. Retention terms under review. |
 OpenStreetMap Foundation (Nominatim) | Geocoding project addresses for the portfolio map | Receives project site addresses from your browser. Retention terms under review. |
 Stripe, Inc. | Payment processing | Billing data only. Receives no customer content. |
 Intuit Inc. (QuickBooks, only when connected) | Two-way sync of vendors, purchase orders, and bills | Data syncs to your organization’s own QuickBooks account. |
Google LLC (Cloud Run)
- Purpose
- Application hosting
- Data retention
- Stateless compute. Retention terms under review.
Supabase, Inc.
- Purpose
- Database and file storage
- Data retention
- Stores your organization’s data. Retention terms under review.
Inngest, Inc.
- Purpose
- Background job orchestration
- Data retention
- Receives data for background jobs. Retention terms under review.
Tiptap GmbH (Tiptap Cloud)
- Purpose
- Storage and editing of preconstruction documents
- Data retention
- Retention terms under review.
Resend, Inc.
- Purpose
- Transactional email: login codes, team and bid invites, reports, and approvals
- Data retention
- Retention terms under review.
PostHog, Inc.
- Purpose
- Product analytics, application logs, error tracking, and request monitoring
- Data retention
- Receives usage events, application logs, and request traces. Retention terms under review.
OpenStreetMap Foundation (Nominatim)
- Purpose
- Geocoding project addresses for the portfolio map
- Data retention
- Receives project site addresses from your browser. Retention terms under review.
Stripe, Inc.
- Purpose
- Payment processing
- Data retention
- Billing data only. Receives no customer content.
Intuit Inc. (QuickBooks, only when connected)
- Purpose
- Two-way sync of vendors, purchase orders, and bills
- Data retention
- Data syncs to your organization’s own QuickBooks account.
AI model and document processing providers
The complete subprocessor list, including AI model and document processing providers, is available to customers and prospective customers under NDA. Email privacy@joinfolio.ai to request it.
Questions from your security or legal team?
Email privacy@joinfolio.ai or talk to our team directly.
Currently onboarding select GC partners.