Legal
Subprocessors
Last updated: 6 June 2026
This is a plain-language legal document written for clarity. It does not constitute legal advice. Defined terms are used consistently across our legal pages.
We keep our supply chain deliberately small. The table below lists the subprocessors GeoQ engages to deliver the Service. This list is referenced by our Data Processing Agreement and Privacy Policy.
Current subprocessors
| Subprocessor | Purpose | Data location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting and infrastructure for the API and supporting services. | EU (eu-west-1, Ireland) control plane; lookups served from EU + US regions |
| Stripe | Payment processing and subscription billing for paid plans. | EU / global (per Stripe's processing terms) |
How we manage subprocessors
- Each subprocessor is bound by data-protection terms consistent with the GDPR.
- Account data and our control plane are hosted in AWS EU (eu-west-1); IP lookups are served statelessly from EU and US regions, and logs are truncated/hashed and deleted within 30 days.
- We remain responsible to you for the performance of our subprocessors.
Changes
We will provide reasonable advance notice of any new or replacement subprocessor and an opportunity to object, as set out in the DPA. To receive change notices, contact support@geoq.io.