A clear chain of trust
Who processes data on our behalf?
BlazeSQL uses carefully selected third-party service providers to operate the service. Each provider is limited to the services it delivers for us and only processes the data needed for that purpose.
Current list
Our subprocessors
The table below shows the subprocessors currently used by BlazeSQL, the role each one plays, the categories of data involved, and the typical processing location.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| GCP Google Cloud Platform (GCP) | Cloud infrastructure, data storage, and computing | All service data | EU / US (configurable for enterprise) |
| VA Google Vertex AI | AI model inference with Zero Data Retention enabled | Chat prompts and responses; not retained by Google | EU / US |
| FS Google Cloud Firestore | Application database and encrypted data storage | Account data, metadata, query results, saved queries, and dashboards | Per GCP region |
| IC Intercom | Customer support and live chat | Name, email address, and support conversations | United States |
| ST Stripe | Payment processing | Payment details, billing email, and transaction data | United States |
Processing locations can vary by product configuration and customer requirements. Enterprise customers can request deployment in a dedicated GCP region for data-residency needs.
Our approach
How we manage subprocessors
Purpose-limited access
Vendors receive only the information needed to provide their service to BlazeSQL and our customers.
Contractual safeguards
Our data-processing terms require appropriate confidentiality, security, deletion, and breach-notification commitments.
Change notifications
Material changes to our subprocessor list are communicated through the applicable privacy and contractual channels.
Data transfers
Keeping international processing accountable
When processing involves transfers outside the European Economic Area, BlazeSQL relies on applicable safeguards such as the EU Standard Contractual Clauses and Google Cloud’s data-processing terms. Enterprise customers can request specific GCP regions to support data-residency requirements.
Learn more in our Privacy Policy →Questions?
We’re happy to help with your review.
For enterprise security assessments, DPA requests, or additional documentation, contact enterprise@blazesql.com.