Subprocessors
Last updated November 13, 2026
The third parties that process customer personal data for the Spiral service.
This page lists the Subprocessors that Fulcrum Technologies, Inc. dba Spiral, Inc. (“Spiral”) engages to process Customer Personal Data for the Spiral service. It is the list of Approved Subprocessors that Section 2.6 of the Spiral Data Processing Addendum refers to. Capitalized terms that this page does not define have the meanings that the Data Processing Addendum gives them.
Infrastructure providers
These Subprocessors provide the compute and the storage that Spiral manages for the Service. Spiral confirms the provider and the region with Customer during setup. A Subprocessor processes Customer Personal Data only if Customer’s deployment uses that provider.
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Compute and object storage | The region that Customer and Spiral agree |
| Google LLC (Google Cloud) | Compute and object storage | The region that Customer and Spiral agree |
| Microsoft Corporation (Azure) | Compute and object storage | The region that Customer and Spiral agree |
| Modal Labs, Inc. | Compute | The region that Customer and Spiral agree |
| Cloudflare, Inc. (R2) | Object storage | The region that Customer and Spiral agree |
| Tigris Data, Inc. | Object storage | The region that Customer and Spiral agree |
Account service providers
This provider does not process Customer Data. It processes the account information of Users, which the privacy policy covers.
| Provider | Purpose | Location |
|---|---|---|
| WorkOS, Inc. | Authentication of Users | United States |
Storage and compute in an account that Customer controls
If Customer keeps its tables in a bucket in its own cloud account, the provider of that bucket is Customer’s provider. It is not a Subprocessor of Spiral. The same rule applies to compute that runs in Customer’s own cloud account.
Updates to this list
Spiral updates this page when it adds or replaces a Subprocessor. Spiral also gives Customer notice of a new Subprocessor, and Customer can object, as Section 2.6 of the Data Processing Addendum states.
To ask a question about this list, contact legal@spiraldb.com.