List of Subprocessors - Privacy
Discover how SurrealDB utilizes subprocessors and third-party providers to ensure secure, efficient data processing in compliance with GDPR. Explore detailed information about data handling practices, purposes, and the entities involved.
Trust and Security
SurrealDB engages certain subprocessors in connection with providing the Services or Support Services. A subprocessor is a SurrealDB affiliate (“SurrealDB Affiliate'') or a third-party engaged by SurrealDB Limited or a SurrealDB Affiliate to process personal data on behalf of SurrealDB’s customers. Capitalised terms used herein have the same meaning as defined in the Master Services Agreement or other written agreement you have with SurrealDB (“Agreement”).
Subscribe to be notified when we add new Subprocessors.
THIRD-PARTY SUBPROCESSORS
For purposes of Data Protection Law, as defined in our DPA, SurrealDB may engage the following entities as Subprocessors to process personal data that you upload to SurrealDB’s Online Services (“Customer Personal Data”):
| Entity | Purpose | Entity Country | Data Types |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud Service Provider | United States: USEast 1, USEast 2, USWest 2, Ireland: EUWest1, India: APSouth 1 | SurrealDB Cloud is hosted on AWS, Customers can deploy their instances in any of the available regions. The control plane for the cloud platform is hosted in the United States. |
Third-Party Subprocessors for Spectron
Spectron is a SurrealDB Cloud Service providing persistent memory for AI agents. It ingests Customer documents, conversations, tool outputs, and observations, extracts entities, relationships, and facts into a knowledge graph, generates vector embeddings, and supports natural-language queries with hybrid retrieval and retrieval-augmented generation.
To deliver these capabilities, Customer Data — including document content, conversation content, tool outputs, observations, and query text — may be processed by any of the AI providers below for operations such as: generating vector embeddings, extracting entities, relationships, and facts, expanding or decomposing queries, synthesising memory, and generating assistant responses. Any of the providers below may serve any of these operations. No Customer Data is used to train any provider's models.
| Entity | Purpose | Entity Country | Data Types |
|---|---|---|---|
| OpenAI PBC | AI provider | United States | May process Customer document content, conversational turn content, and query text for any of the Spectron AI operations described above. |
| Anthropic PBC | AI provider | United States | May process Customer document content, conversational turn content, and query text for any of the Spectron AI operations described above. |
| Google LLC | AI provider | United States | May process Customer document content, conversational turn content, and query text for any of the Spectron AI operations described above. |
The Subprocessors listed above for Spectron are in addition to all Subprocessors, service providers, and SurrealDB Affiliates described elsewhere on this page.
OTHER THIRD-PARTY SERVICE PROVIDERS
Acting as a data controller under Article 4 of GDPR, and in accordance with our Privacy Policy, we may engage other service providers to perform certain processing activities, including the following:
| Third-Party Entity | Description of Processing | Entity Country | Data Types |
|---|---|---|---|
| Get Lago Corp. | Metering and Usage-Based Billing Provider | United States | This tracks metrics around a Customers’’ usage, storage, and compute costs that accrue during any billing period |
| Slack Technologies, Inc. | Customer Support Ticketing | United States | Personal information such as first name, last name, email when engaging with support. |
| Intercom, Inc | Ticketing, Customer Support | United States | Personal information such as first name, last name and email for support ticketing. |
| Hubspot | Customer Information Storage | United States | Stores customer SurrealDB account information like billing address, sign up email. |
| Scout OS | Surreal Sidekick AI tool | United States | Answers customer questions by searching our Documentation for answers. PII will only be processed to the extent Customer inputs questions including PII |
| Google LLC | Workspace Productivity Services including email | United States | Processes customer SurrealDB account holder information (e.g name, email address, company). No SurrealDB instance content is processed |
| Stripe, Inc. | Payment Provider | United States | Stripe receives billing information, such as your name, credit card details, and address, if you pay for SurrealDB services by credit card. |
| Grafana Labs | Product telemetry and stack visualisation tool | United States | Usage Data on query performance, speed of query \- not the query itself. |
| Auth0 (Okta, Inc.) | Authentication (for Surrealist) | United States | Auth0 processes information in the course of authenticating Users into the service via federated single sign in (e.g., first and last name, business contact info, email). |
| Anrok, Inc. | Sales Tax computation for Customer invoices | United States | Personal information such as first name, last name, title, contact information and localisation data |
| MailGun Technologies, Inc. | Auth0 email confirmation / authentication | United States | Personal information; name and email |
| n8n GmbH | Customer data workflow automation | Germany | Processes customer SurrealDB Cloud account information such as first and last name, billing address, sign up email |
| Datadog Inc | Logging and Protective Monitoring | Germany | Data relating to SurrealDB Cloud user actions and authentication events including user data such as email address and ip. No SurrealDB queries are captured. |
SURREALDB AFFILIATES
The SurrealDB Affiliates below may also act as Subprocessors to the extent that these Affiliates process Customer Personal Data when providing Support to customers:
| Entity | Entity Country |
|---|---|
| SurrealDB Limited | United Kingdom |
| SurrealDB, Inc. | United States |