Neurolabs Subprocessors
Last updated on September 17, 2026. Historic versions are available on request.
Neurolabs uses a limited number of trusted third-party service providers (subprocessors) to support the delivery of its enterprise image recognition platform and associated services. These subprocessors may process Customer Data (including Personal Data) as outlined in our Data Processing Addendum (DPA).
All subprocessors are bound by contractual obligations to maintain confidentiality and meet data protection standards equivalent to those required under UK/EU/US Data Protection Laws. Where data is transferred internationally, Neurolabs ensures adequate safeguards are in place, for example Standard Contractual Clauses (SCCs) or International Data Transfer Agreement (IDTA).
Neurolabs does not authorize subprocessors to use Customer Data for their own purposes.
This version 2 of this sub-processor list was last updated on 14 September 2026.
Infrastructure and Hosting
| Name | Purpose | Data types | Primary data residency / sub-processing terms |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure for ZIA platform | Customer images, metadata, user data | UK. DPA: aws-dpa.pdf |
| Google Cloud Platform (GCP) | Cloud infrastructure | Customer images, metadata, user data | UK. DPA: cloud.google.com/terms/data-processing-addendum |
| Databricks | Data platform for ZIA Insights processing and delivery | Recognition results, catalogue metadata, aggregated usage data | UK. DPA: databricks.com/legal/databricks-data-processing-addendum |
AI and Machine Learning
| Name | Purpose | Data types | Primary data residency / terms |
|---|---|---|---|
| OpenAI | AI-assisted product detail enrichment and catalogue metadata generation | Product images, catalogue metadata1 | UK. DPA: openai.com/policies/data-processing-addendum |
| Google Vertex AI (Gemini) | AI-assisted recognition and enrichment tasks | Product images, catalogue metadata1 | UK and EU. DPA: cloud.google.com/terms/data-processing-addendum |
For clarity, Neurolabs contracts with these providers on enterprise terms under which Customer Data is not used to train their models and is subject to zero or limited retention.
Analytics
| Name | Purpose | Data types | Primary data residency / terms |
|---|---|---|---|
| Google Analytics | Website usage tracking | Anonymized usage data, page views | UK and EU. DPA: cloud.google.com/terms/data-processing-addendum |
| Mixpanel | Product usage analytics for the ZIA web applications | Pseudonymized user events, feature usage | EU. DPA: mixpanel.com/legal/dpa |
Engineering and Monitoring
| Name | Purpose | Data types | Primary data residency / terms |
|---|---|---|---|
| Sentry | Application error monitoring and diagnostics | Technical logs, error traces, limited user identifiers | EU (Frankfurt). DPA: sentry.io/legal/dpa |
| Linear | Internal issue tracking | Internal project data | EU. DPA: linear.app/dpa |
1 Does not include personal data unless captured in a Customer image (not intended and prohibited under Neurolabs' standard Customer Terms).
Questions? Contact privacy@neurolabs.ai
.png)