Legal · DPA
Data Processing Addendum
GDPR-aligned, with EU Standard Contractual Clauses incorporated by reference. Pre-signed and ready to attach.
Effective August 7, 2026
Sub-processors
Current sub-processor list.
The third parties we use to deliver the service. We keep this list short on purpose.
Sub-processor
Role
Location
Certifications
Hosting provider (US-region cloud)
Compute, storage, network
United States
SOC 2 Type II · ISO 27001
Object storage (US-region)
File uploads, 3D models, image planes
United States
SOC 2 Type II
Email delivery
Transactional and account email
United States
SOC 2 Type II
Error monitoring
Application error reporting
United States
SOC 2 Type II
Customer support tooling
Inbound support tickets
United States
SOC 2 Type II
Payment processing (Stripe, Inc.)
Subscription billing and checkout
United States
PCI DSS Level 1 · SOC 2 Type II
Scope
What we process, on your behalf.
When you use Spatial Map, we act as a processor for the workspace content you create and the data you feed into the live channel. You remain the controller.
Category
Who can see it
Examples
Account data
Workspace admins, members
Email, name, role, profile metadata
Workspace content
Members per role
Facility layouts, shapes, bins, custom fields
Live data feeds
Connected systems
Sensor readings, asset positions, RFID, CV events
Usage telemetry
Workspace admins (via audit log)
Page views, feature usage, IP, user-agent