Sub-processors
Last updated: January 2026
Overview
DataSpring uses third-party service providers ("sub-processors") to help deliver our service. This page lists all sub-processors that may process personal data on behalf of our customers.
We maintain appropriate data processing agreements with each sub-processor to ensure they meet GDPR requirements and provide adequate data protection.
Current Sub-processors
Google Cloud Platform
- Purpose
- Cloud infrastructure including compute (Cloud Run), database (Firestore), storage (Cloud Storage), and data warehouse connectivity
- Data Location
- EU (europe-west1, Belgium)
- Data Processing Agreement
- View DPA →
Firebase
- Purpose
- User authentication, web hosting, and real-time database services
- Data Location
- EU (europe-west1) for data storage; US for authentication service
- Data Processing Agreement
- View DPA →
Anthropic
- Purpose
- AI/LLM services for natural language query processing
- Data Location
- United States
- Data Processing Agreement
- View DPA →
Data Processing Locations
We prioritize EU data residency. Our primary infrastructure runs in Google Cloud's europe-west1 (Belgium) region, including:
- Cloud Run (API servers)
- Firestore (database)
- Cloud Storage (file storage)
- Cloud Functions (serverless compute)
Firebase Authentication is a global service hosted in the US. This service handles authentication tokens only and is covered by Google's Standard Contractual Clauses for EU-US data transfers.
Changes to Sub-processors
We will update this page when we add or remove sub-processors. If you have a Data Processing Agreement with us, we will notify you of any material changes to our sub-processor list as required by that agreement.
Questions
If you have questions about our sub-processors or data processing practices, please contact us at privacy@dataspring.app.