1. About this list
To run GIMLabs we use a small number of third-party services (”subprocessors”) that may process Customer Data or personal data on our behalf. Each is bound by a written agreement that requires it to protect the data and use it only to provide its service to us. Where data leaves the UK or EEA, we protect it as our Privacy Policy and Data Processing Agreement describe.
2. Infrastructure
| Provider | Service | Where data is processed |
|---|
| Vercel Inc. | Application hosting | United Kingdom (London) |
| Amazon Web Services, Inc. | File storage and transactional email | United Kingdom (London) |
| MongoDB, Inc. | Database | European Economic Area (Ireland) |
3. Product features
| Provider | Service | Where data is processed |
|---|
| Anthropic, PBC | AI assistant (Sonde): answers questions you ask it about your project, using the data needed to answer. Not used to train AI models | United States |
| Mapbox, Inc. | Maps, geocoding and place search: receives the map area and searches, not your project data | United States |
| MapTiler AG | Historical map tiles: receives the map area | Switzerland |
4. Analytics
| Provider | Service | Where data is processed |
|---|
| PostHog, Inc. | Product analytics, run without cookies | European Union (Germany) |
5. Payments
| Provider | Service | Where data is processed |
|---|
| Stripe Payments Europe, Ltd. and Stripe, Inc. | Subscription payments, invoices and tax | European Union and United States |
6. Communications
| Provider | Service | Where data is processed |
|---|
| Hostinger International Ltd. | Our @gimlabs.io mailboxes, for support and sales email | Hostinger data centres (EU, UK and elsewhere) |
| Microsoft Corporation | Microsoft 365: our business email, files and internal notifications, such as new signups | United Kingdom |
| Loops, Inc. | Product update and newsletter emails, only to people who have not opted out | United States |
7. Public map data
These organisations publish the reference layers you can switch on in the map. When a layer is on, your browser asks them for the map area in view. They do not receive your project data.
| Organisation | Data | Where |
|---|
| OpenStreetMap Foundation | Base map data | United Kingdom |
| British Geological Survey | Geological maps and data | United Kingdom |
| Environment Agency | Environmental data | United Kingdom |
| Mining Remediation Authority | Coal mining data | United Kingdom |
| EuroGeoSurveys, served by the Geological Survey of Slovenia | European geology (EGDI) | European Union (Slovenia) |
8. Affiliates
| Affiliate | Role | Where |
|---|
| SoTech Studio Limited | Development, hosting management and support | United Kingdom |
9. Changes to this list
We update this page at least 30 days before we start using a new subprocessor for Customer Data. To be emailed about changes, write to privacy@gimlabs.io. Our Data Processing Agreement explains how you can object.
