Data Processing Agreement (DPA)

Last Updated: March 2026

Overview

This Data Processing Agreement ("DPA") governs the processing of personal and proprietary data by BuildSheet on behalf of "Team" tier and enterprise customers. It supplements our Terms of Service and Privacy Policy, ensuring compliance with global privacy regulations including GDPR (EU) and LGPD (Brazil).

Sub-processors

BuildSheet engages the following essential sub-processors to deliver its service:

• Google Cloud (Firestore, Vertex AI): Hosting, storage, and AI processing. Governed by Google Cloud CDPA.
• Stripe: Payment processing. Governed by their global privacy terms.

Data Subject Requests

BuildSheet provides the necessary tools via its UI for customers to export (JSON/CSV) and permanently delete their data. Should an organization receive an access request under GDPR or LGPD that requires our assistance, requests may be routed to our DPO at dpa@buildsheet.cloud.

If you require a countersigned DPA for your organization's legal compliance, please contact our sales team.