Platform providers and sub-processors
Version 0.1
Spindox Labs S.r.l. operates the digital platform of the energy communities, and the dataspace nodes of the participating grid operators, on their behalf. This list names the providers that Spindox Labs uses for that service, and the other services the platform contacts.
Sub-processors
These providers process personal data for Spindox Labs, under a contract with the same data-protection obligations as Spindox Labs' own.
| Provider | Service | Where |
|---|---|---|
| Google Cloud EMEA Limited, Dublin, Ireland | Hosting of applications, databases and backups | European Union |
Spindox Labs' own infrastructure
| Service | Where |
|---|---|
| AI assistant, and reading of bills and identity documents in the membership application: open-weight language model on Spindox Labs' own server | Trento, Italy |
| Platform services on Spindox Labs' own infrastructure | Trento, Italy |
No personal data is sent to an external artificial intelligence provider.
Other services the platform contacts
These services are not sub-processors. They receive only what is needed for the task described, without the user's name.
| Service | What it receives | Why |
|---|---|---|
| OpenStreetMap Foundation, United Kingdom (Nominatim, map tiles) | The supply address, and the IP address of the browser that displays a map | Locating the supply address within the community's area; showing maps |
| The push service of the user's browser (for example, Google, Mozilla or Apple) | An encrypted notification, which the push service cannot read | Delivering push notifications the user has allowed |
Changes
The communities and grid operators that Spindox Labs serves are informed of a new or replaced sub-processor at least 30 days in advance. This list shows the current version and its date.