SDSI BUSINESS SYSTEMS
Legal Privacy DPA Sub-Processors Security Terms

Legal

Sub-Processors

Version 1.2 · Published 9 September 2026 · Controller: SDSI Business Systems, Inc., United States

1. What this page is

This is the complete, closed list of our sub-processors and other recipients of personal data. It is not a sample, an illustration or a set of categories. Every party that processes personal data on our behalf is named on it. A party that is not named on it does not process personal data on our behalf.

If you find a party handling data for us that is absent from this page, tell us at rapidestimator@sdsinow.com and we will correct it.

2. The recipients

RecipientWhat it does for usCountry of operation
Cloudflare, Inc. Website hosting and content delivery for rapidestimator.net United States
Formspree, Inc. Intake of the public contact form (name, company, email, phone, message) United States
Authorize.Net (Visa U.S.A. Inc.) Payment checkout for Rapid Estimator purchases and renewals United States
GoTo Technologies USA, Inc. (LogMeIn Rescue and GoTo Connect) Remote support sessions started by the customer; business phone and SMS delivery for contacts who have opted in United States
Intuit Inc. (QuickBooks Online) Optional accounting connection the customer authorises from the desktop program United States

Five recipients, and no others. This list is closed.

3. Infrastructure we operate ourselves

License and subscription records are stored on SDSI’s license server in the United States, which SDSI Business Systems, Inc. operates. The desktop program checks the serial against that subscription database. That server is not a sub-processor. It is our own system, in the United States, used by SDSI staff only.

4. What we do not use

We use no advertising network, no analytics provider that receives personal data from this website, no data broker and no contact-list vendor. There is no integrated AI and no model provider on this list. We hold no payment card data on this website, so card data is taken only by Authorize.Net as named above.

5. Notice of change, and your right to object

We give 30 days notice before a new sub-processor begins processing personal data. Notice is given by publishing the change on this page with a new version number and date, and by writing to every client under contract.

A client may object to the appointment of a new sub-processor during that period, in writing, on reasonable grounds relating to data protection. Where an objection cannot be resolved, the client may terminate the affected service without penalty.

Removals are published on the same terms. Where a party leaves this list we say so, rather than deleting the row without a record.

6. How we contract with them

Every party on this page is engaged under a written contract that binds it to process personal data only for the purpose we appoint it, to keep it confidential, and to apply appropriate security. Our own commitments to clients are set out in our Data Processing Terms. What we collect and why is set out in our Privacy Notice.

7. Change record

VersionDateChange
1.018 August 2026First publication. Five recipients named. License host recorded as SDSI-operated infrastructure in the United States.
1.124 August 2026GoTo row expanded to include GoTo Connect phone and SMS delivery. Still five recipients.

8. How to reach us

Write to rapidestimator@sdsinow.com, or to SDSI Business Systems, Inc., 25060 Hancock Ave #419, Murrieta, CA 92562, United States. Our other published documents are indexed on the Legal page.

© 1984–2026 SDSI Business Systems, Inc. All rights reserved.
Legal Privacy Terms Security Data Processing Sub-Processors