Last updated: 2026-04-27
This page lists the third-party processors StelaHome relies on to deliver the Platform. It supplements our Privacy Policy and any data-processing addendum we have entered into with a customer.
Amazon Web Services (AWS) — hosting and processing for compute, storage, database, and networking. Region: us-east-1. Services include Lambda, API Gateway, DynamoDB, S3 (SSE-KMS at rest), CloudFront, CloudWatch, KMS, Cognito, SNS, SQS, and AWS Bedrock for AI inference.
Amazon Cognito — user-pool authentication, MFA, and session-token issuance. Cognito processes email and phone for authentication and verification only.
Stripe — payment processing, subscription billing, dispute handling, Stripe Connect for creator payouts, and tax form support where applicable. Card numbers are entered directly into Stripe-hosted surfaces and are not received or stored by StelaHome.
Anthropic (via AWS Bedrock) — large-language-model inference for narrative generation, guide drafting, and Q&A support. All inference is server-side; provider keys are never exposed to the browser. Customer data is not used for model training.
Public and licensed datasets used to power StelaReport include: FEMA National Flood Hazard Layer; EPA ECHO and Envirofacts; USGS National Seismic Hazard Model and Landslide Inventory; NOAA HURDAT2, Storm Events, and NCEI climate datasets; PHMSA pipeline data; FCC Broadband Map; EPA LCRR lead-service-line inventory; U.S. Department of Education Common Core of Data; BuildFax (licensed); NYC Department of Buildings (public). These sources operate under their own public-data or licensing terms.
Google Solar API — roof geometry and condition signals derived from coordinates. We share property coordinates only; we do not share unhashed addresses.
Email delivery and other transactional services may be provided by additional vendors as needed (for example, transactional email and observability platforms). We list any new addition here at least thirty (30) days before activation, except where a security-incident response requires faster onboarding.
StelaHome data is processed in the United States, primarily in AWS region us-east-1. We do not currently maintain processing in the European Economic Area or the United Kingdom; any future expansion will be reflected in this list and in our Privacy Policy.
For business customers operating under a written data-processing addendum, we provide advance notice of changes to this list according to the notice period specified in that DPA. Subscribe to subprocessor-updates@stelahome.com to receive notifications.