Notification commitment: we provide customers advance written notice at least 30 days before adding or materially changing any subprocessor that processes customer data, giving customers the opportunity to review and raise objections before the change takes effect. Upcoming changes are announced in the Planned changes section below before they take effect.
Last updated: 2026-08-27
Subprocessors that process customer data
| Service | Function | Customer data processed | Location |
|---|---|---|---|
| Google Cloud Platform / Firebase (App Hosting, Firestore, Cloud Storage, Cloud Functions, Authentication, Cloud Logging) | Application hosting, database, file storage, authentication, audit logging | Account data, evaluation records, uploaded datasheets, access logs | United States (Firestore: nam5 multi-region; Storage and hosting: us-central1) |
| Google Gemini API (Paid Services) | AI processing for datasheet analysis and evaluation generation | Datasheet content and evaluation context during inference; uploaded files held transiently by Google up to 48 hours | Global (not region-pinned); no training on customer data per Paid Services terms |
| Google Analytics | Application usage analytics | Usage and interaction events | Global |
| Gmail (Google Workspace SMTP) | Transactional email to customers (account, usage-limit, contact, and status notifications) | Recipient email addresses and message content | Global |
Planned changes
Upcoming subprocessor additions or material changes are announced here at least 30 days before they take effect.
No changes are currently planned.