Sub-processors

Last updated: June 2026

Boom Interactive Inc. engages sub-processors to process personal data contained in Customer Content in connection with the CoreSpec 3D service. Each is bound by data-protection terms no less protective than those in our Data Processing Addendum, and Boom remains liable for their performance.

Categories we engage

Under the DPA, customers give general authorization for Boom to engage sub-processors in these categories:

  • Cloud infrastructure, hosting and object storage — running the CoreSpec platform and storing Customer Content.
  • Identity and authentication — signing users in and keeping accounts separate.
  • Payment processing — taking subscription payments. Card details go to the payment provider and are never held by Boom.
  • Artificial intelligence and machine learning services — reading drawings a customer uploads, so the platform can identify what a sheet is, read its title block, and build a 3D scene from it.
  • Mapping, geocoding and location services — turning a property address into a point on a map.
  • Email, messaging and support tooling — account email, notifications and support conversations.
  • Analytics, logging and error monitoring — keeping the service working and diagnosing faults.

The current list, by name

Boom maintains a current list naming every sub-processor and the category it serves, including its processing location and security certifications. We provide it on request, and to anyone evaluating CoreSpec 3D in a security review. Ask at info@cs3d.ai.

Changes

We will provide at least 30 days’ notice of any intended addition or replacement of a sub-processor that processes Customer personal data, giving customers the opportunity to object on reasonable data-protection grounds. To receive change notifications, contact info@cs3d.ai.

International transfers

Where personal data of EEA or UK data subjects is processed in the United States, transfers are made under the EU Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum, as set out in the DPA.