Subprocessors
Last updated: 21 September 2026 — Version 1.0
This page lists the principal Subprocessors SparkList uses to process Customer Personal Data on behalf of professional users, as described in the Data Processing Agreement.
A Subprocessor here is another processor SparkList engages to process Customer Personal Data (checklists, photos, team information, job activity, and related operational data) in order to provide the Service.
Current subprocessors
| Provider | Purpose | Customer Personal Data involved |
|---|---|---|
| Scaleway | Server and database hosting | Account, property, checklist, team, and operational records stored to run the Service |
| Cloudflare | File storage | Proof-of-work photos, reference photos, issue photos, and other uploaded media |
| OpenAI | Optional AI-assisted image or content processing | Content the Customer (or an authorized user) submits to an AI feature, such as photos or checklist text |
| Sentry | Crash reporting and error diagnostics for the Service | Technical diagnostics that may incidentally include identifiers or operational context from an error |
| Firebase / Google | App infrastructure where those features are enabled (for example notifications or authentication) | Identifiers and device tokens needed to operate the relevant app feature |
OpenAI is engaged only when a Customer uses an optional AI-assisted feature. Location and geolocation data are processed according to the Customer's configuration of the Service, as described in the Privacy Policy (on-site status for active jobs, not a continuous GPS trail).
What this list does not include
SparkList also uses service providers for processing where SparkList acts as an independent controller. Those providers are described in the Privacy Policy and are not subprocessors of Customer Personal Data under the DPA. They include, for example:
- Stripe, Apple, Google, and other payment providers — billing and subscription for the SparkList account;
- PostHog and Google Analytics — analytics on the SparkList marketing website;
- UXCam and Mixpanel — SparkList's own product analytics and session analysis, where SparkList determines the purposes and means of that processing.
The broader list of providers SparkList uses, including those controller activities, remains in Privacy Policy §5.2.
Changes
SparkList may add or replace subprocessors as described in DPA §9.3. Material additions or replacements that affect Customer Personal Data will be reflected on this page.
Questions: [email protected].