Infrastructure & Sub-processors
AttributeIQ runs on Google Cloud Platform infrastructure. All application data is processed and stored within the EU.
Google Cloud Platform
BigQuery query execution. Our service account has Data Viewer and Job User roles, the minimum required.
EU (Belgium)Supabase
User authentication, profile data, and configuration storage. All data encrypted at rest and in transit.
EU (London)Authentication
Handled via Supabase Auth with Google OAuth. Tokens stored securely server-side, never exposed to the client.
OAuth onlySub-Processors
Sub-Processor
Location
Purpose
Data Processed
Google Cloud Platform
EU (Belgium)
BigQuery data storage & query execution
GA4 analytics data, ingested and stored in AttributeIQ infrastructure
Supabase
EU (London)
Auth, database, edge functions
Email, property config, settings
Google OAuth
EU infrastructure
Authentication
Email address only
Resend
EU-hosted
Transactional email
Email address for account notifications only
HubSpot
EU/US (depends on your account region)
Contact and deal data sync (optional)
Contact name, email, company, deal value, deal stage
Security Measures
Encrypted Connections
All data transmitted securely over TLS, with no unencrypted paths allowed
Encrypted at Rest
All stored data encrypted at rest using AES‑256 with key management
OAuth Only
Authentication runs entirely through Google OAuth, no passwords ever stored
Least-Privilege Access
BigQuery service account limited to minimal required roles and permissions
IP Whitelisting
Database access restricted to a tightly controlled list of approved IPs
Row-level Security
Supabase RLS ensures users can only access data tied to their own workspace
Access Logging
Every database access is automatically logged and monitored for anomalies
No Raw Data Retention
GA4 event data is stored exclusively in AttributeIQ’s secure EU infrastructure and never shared across accounts or used beyond generating your reports.
Certifications
Built on certified infrastructure
AttributeIQ does not currently hold independent application-level certifications. If your organisation requires a DPA, NDA, or security questionnaire, contact us.