Sub-processors

Last updated:

Who processes data for Construct

Construct Computer engages the vendors below to help operate construct.computer and the Construct platform (API and web app). Each processes personal data only as needed for the stated purpose, under Construct’s instructions and the agreements we have with them. This list supplements our Privacy Policy.

Prompts and conversation context required to run your agent are sent to the model provider serving the request. On the platform fleet that is Cloudflare Workers AI and Google Gemini, and with your own key (BYOK) it is the provider you choose. Platform decision questions are answered by Cloudflare’s Clef model on Workers AI. TypeSafe’s Jev is kept as an alternative decision model and does not receive your conversations.

Apps you choose to connect (for example Google Workspace tools, Slack, Telegram, Discord, or a custom MCP server) exchange data with those services at your direction. Those connections are described in Privacy Policy section 4.1 and are not repeated here as Construct infrastructure sub-processors.

Current sub-processors

Platform

Run the website, API and web app for every account.

  • Cloudflare, Cloud infrastructure

    Region: Global

    Hosts the website, API and web app, and stores workspace data in D1, R2, Durable Objects, Queues and Vectorize. Also runs agent sandboxes, AI Gateway for model requests, bot protection (Turnstile), rate limiting, observability logs and traces, and transactional and agent email (Email Sending and Email Routing).

    Cloudflare, Inc.Privacy policy for Cloudflare, Inc.

  • Google, Sign-in

    Region: Global

    Handles sign-in with Google. Construct receives your email, profile ID, name and avatar.

    Google LLCPrivacy policy for Google LLC

  • Composio, Integrations

    Region: USA

    Manages OAuth connections and runs tool calls against the apps you connect, along with web search and interactive browser tasks when you use those capabilities.

    ComposioPrivacy policy for Composio

  • Exa, Web search

    Region: USA

    Powers the agent’s web tools. Search queries and the URLs your agent reads are sent to Exa, which returns results and page content.

    Exa Labs Inc.Privacy policy for Exa Labs Inc.

  • Context.dev, Web search

    Region: USA

    Powers the agent’s web tools. Search queries and the URLs your agent reads are sent to Context.dev, which returns results and page content.

    Context Dev Inc.Privacy policy for Context Dev Inc.

  • Dodo Payments, Payments

    Region: India

    Processes subscription billing and payment methods, and sends billing receipts. Construct receives signed lifecycle webhooks, not raw card numbers.

    Dodo PaymentsPrivacy policy for Dodo Payments

  • PostHog, Analytics

    Region: EU

    Product analytics and session replay. Website traffic reaches PostHog through Construct’s first-party proxy (x.construct.computer), and the API also sends allowlisted product events.

    PostHog, Inc.Privacy policy for PostHog, Inc.

  • Sentry, Error monitoring

    Region: USA

    Receives error reports and performance traces from the API and web app, including stack traces and related diagnostic context.

    Functional Software, Inc.Privacy policy for Functional Software, Inc.

  • PartnerStack, Affiliate program

    Region: USA

    Attributes referrals and reports commissions when you arrive through a partner link and later subscribe.

    PartnerStack, Inc.Privacy policy for PartnerStack, Inc.

Model providers

Process prompts and context when they serve a request, on the platform fleet or with your own key (BYOK).

  • Cloudflare Workers AI, AI models, memory, voice

    Region: Global

    Serves the main agent and coding models on the platform fleet, and stands in for Gemini when it is unavailable, so prompts and conversation context for most agent turns are processed here. Workers AI also extracts memories from your conversations and indexes them for search, answers platform decision questions with Cloudflare’s Clef model, transcribes voice input, and is the backup voice for replies read aloud. Requests go through Cloudflare AI Gateway, which skips its request log for decision and voice requests.

    Cloudflare, Inc.Privacy policy for Cloudflare, Inc.

  • Google Gemini, AI models, voice

    Region: Global

    Runs the subagent, image and summary models on the platform fleet, and stands in when the main or coding model is unavailable, so prompts and conversation context are processed by Google AI Studio through Cloudflare AI Gateway. Gemini also reads your agent’s replies aloud when you use voice, and is the last fallback for transcribing voice input.

    Google LLCPrivacy policy for Google LLC

  • OpenRouter, AI models, BYOK

    Region: USA

    Serves optional platform fleet models, and routes bring-your-own-key (BYOK) requests when an OpenRouter key or OpenRouter-hosted model is used. OpenRouter passes each request to the model provider serving it, which may process it outside the USA.

    OpenRouter, Inc.Privacy policy for OpenRouter, Inc.

  • TypeSafe, Decision models

    Region: USA

    Hosts Jev, an alternative decision model that a decision can be switched to in place of the default (Cloudflare’s Clef, on Workers AI), reached through Cloudflare AI Gateway. When a decision uses Jev, Construct sends a short structured question with only the fields it needs, for example a name your agent is about to remember and the similar names already in your memory. TypeSafe does not receive your conversations.

    TypeSafe AI, Inc.Privacy policy for TypeSafe AI, Inc.

  • OpenAI, AI models, BYOK

    Region: Global

    Processes prompts and conversation context when you supply an OpenAI API key.

    OpenAI, Inc.Privacy policy for OpenAI, Inc.

  • Anthropic, AI models, BYOK

    Region: Global

    Processes prompts and conversation context when you supply an Anthropic API key.

    Anthropic PBCPrivacy policy for Anthropic PBC

  • Amazon Bedrock, AI models, BYOK

    Region: Your AWS region

    Processes prompts and conversation context when you configure Amazon Bedrock or Bedrock Mantle credentials.

    Amazon Web Services, Inc.Privacy policy for Amazon Web Services, Inc.

  • xAI, AI models, BYOK

    Region: USA

    Processes prompts and conversation context when you connect an xAI (Grok) key or sign in with xAI.

    xAI Corp.Privacy policy for xAI Corp.

Changes

We may update this list when we add or replace a vendor. Material changes will be reflected here with a revised “Last updated” date. For questions, see Support.