Sub-processors
Last updated: 9 September 2026
The third parties Ignela (Spearhead Analytics Limited) uses to process data, with their role, location, and the safeguard for any non-EU transfer. We update this list before adding or removing a sub-processor and notify affected customers. See our Privacy Policy for context.
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Amazon Web Services | Application hosting and encrypted backup storage — all per-tenant data at rest | EU region by default for EU customers | EU SCCs + AWS DPA |
| Clerk | Authentication & identity (login, MFA, organizations) | USA | EU SCCs + Clerk DPA |
| Stripe | Subscription billing (no card data held by us) | USA | EU SCCs + Stripe DPA |
| Postmark (planned) | Transactional email (invites, alerts). Not yet in service; listed ahead of activation. | USA | EU SCCs |
| Mistral AI | Large-language-model suggestions (AI metric and dictionary authoring). Used only when an org enables the AI suggestion feature. Data sent: dataset and column names plus up to 5 sample rows from the dataset being described. | EU (EU API endpoint) | EU-hosted; Mistral DPA |
| Google Cloud BigQuery | Operator product telemetry (feature usage events keyed by pseudonymous org and user ids; no tenant data). Only when telemetry is enabled. | EU region | EU SCCs + Google Cloud DPA |
| Vercel | Marketing site & docs hosting; cookieless web/analytics (no tenant data) | USA | EU SCCs + Vercel DPA |
| ImprovMX | Inbound business-email forwarding for our published addresses | USA | Standard transfer terms |
Notes
- Your connected warehouse is a data source, not our sub-processor. When you connect a warehouse (for example Google BigQuery), you own that account; we hold a credential to run your SQL on your instruction. Rows returned are cached per-tenant in our AWS-hosted store (where AWS is the sub-processor).
- Data residency. Primary storage is provisioned in an EU region by default for EU-resident customers. US-based sub-processors are covered by EU Standard Contractual Clauses. A fully EU-only deployment is on the roadmap.
- Error-monitoring and log-aggregation providers may be added in future; this list will be updated before they process any data.