Neurolabs Subprocessors

Last updated on September 17, 2026. Historic versions are available on request.

Neurolabs uses a limited number of trusted third-party service providers (subprocessors) to support the delivery of its enterprise image recognition platform and associated services. These subprocessors may process Customer Data (including Personal Data) as outlined in our Data Processing Addendum (DPA).

All subprocessors are bound by contractual obligations to maintain confidentiality and meet data protection standards equivalent to those required under UK/EU/US Data Protection Laws. Where data is transferred internationally, Neurolabs ensures adequate safeguards are in place, for example Standard Contractual Clauses (SCCs) or International Data Transfer Agreement (IDTA).

Neurolabs does not authorize subprocessors to use Customer Data for their own purposes.

This version 2 of this sub-processor list was last updated on 14 September 2026.

Infrastructure and Hosting

NamePurposeData typesPrimary data residency / sub-processing terms
Amazon Web Services (AWS) Cloud infrastructure for ZIA platform Customer images, metadata, user data UK. DPA: aws-dpa.pdf
Google Cloud Platform (GCP) Cloud infrastructure Customer images, metadata, user data UK. DPA: cloud.google.com/terms/data-processing-addendum
Databricks Data platform for ZIA Insights processing and delivery Recognition results, catalogue metadata, aggregated usage data UK. DPA: databricks.com/legal/databricks-data-processing-addendum

AI and Machine Learning

NamePurposeData typesPrimary data residency / terms
OpenAI AI-assisted product detail enrichment and catalogue metadata generation Product images, catalogue metadata1 UK. DPA: openai.com/policies/data-processing-addendum
Google Vertex AI (Gemini) AI-assisted recognition and enrichment tasks Product images, catalogue metadata1 UK and EU. DPA: cloud.google.com/terms/data-processing-addendum

For clarity, Neurolabs contracts with these providers on enterprise terms under which Customer Data is not used to train their models and is subject to zero or limited retention.

Analytics

NamePurposeData typesPrimary data residency / terms
Google Analytics Website usage tracking Anonymized usage data, page views UK and EU. DPA: cloud.google.com/terms/data-processing-addendum
Mixpanel Product usage analytics for the ZIA web applications Pseudonymized user events, feature usage EU. DPA: mixpanel.com/legal/dpa

Engineering and Monitoring

NamePurposeData typesPrimary data residency / terms
Sentry Application error monitoring and diagnostics Technical logs, error traces, limited user identifiers EU (Frankfurt). DPA: sentry.io/legal/dpa
Linear Internal issue tracking Internal project data EU. DPA: linear.app/dpa

1 Does not include personal data unless captured in a Customer image (not intended and prohibited under Neurolabs' standard Customer Terms).

Questions? Contact privacy@neurolabs.ai