AES-256 & TLS 1.3
End-to-end encryption for all shop estimates, client quotes, and DXF files.
99.9% Cloud SLA
Globally distributed redundant cloud architecture backed by AWS infrastructure.
Automated Backups
Hourly snapshots ensure your remnant inventory and quotes are never lost.
1. Scope & Data Processing Roles
This Data Processing Addendum ("DPA") supplements the StoneHub Terms of Service. Under applicable data protection legislation (including GDPR, UK GDPR, and CCPA/CPRA):
- Customer / Fabrication Shop: Acts as the Data Controller for all end-client showroom quotes, homeowner project addresses, and contractor billing info entered into StoneHub.
- StoneHub: Acts as the Data Processor, handling and storing data solely to execute the software services requested by the customer.
2. Technical & Organizational Measures (TOMs)
StoneHub maintains strict technical and organizational safeguards designed to protect personal and confidential business data:
Granular permissions let shop owners restrict estimators from seeing raw slab cost margins or restrict sawyers from modifying financial contracts.
Logical database tenant partitioning prevents cross-shop data leaks, ensuring each fabricator's records remain isolated.
Continuous security monitoring detects unauthorized login anomalies. In the event of a verified security incident, affected customers are notified within 48 hours.
3. Authorized Sub-Processors
StoneHub utilizes a select group of industry-standard enterprise sub-processors under strict contractual data privacy agreements:
| Sub-processor | Role | Location |
|---|---|---|
| Amazon Web Services (AWS) | Primary Cloud Compute & Secure Encrypted Database Storage | United States |
| Cloudflare, Inc. | DDoS Protection, Edge CDN & DNS Acceleration | Global |
| Stripe, Inc. | PCI-DSS Compliant Subscription Billing Processing | United States |
4. DPA Requests & Security Audits
Enterprise fabricators and commercial architectural millwork firms requiring a countersigned DPA or custom security compliance review may submit their request directly to:
StoneHub Data Protection Officer
Website: https://stonehubapp.com
Email: contact@stonehubapp.com