Legal
Compliance and Data Use
How Sparengine handles aviation records, what we do with them, and how the work stays defensible.
Scope of this page
This page explains how Sparengine handles the records customers send for analysis, how the analysis is produced, and the safeguards in place. It complements but does not replace the Privacy Policy, which covers personal data specifically.
Sparengine is operated by SPARENGINE, a SASU registered with the Toulouse Trade and Companies Register (RCS Toulouse 130 079 254), with its registered office at 13 Rue Sainte Ursule, 31000 Toulouse.
The records Sparengine handles
Customers send aviation records for processing. This includes logbooks, certifications, maintenance information system exports, back to birth documentation, photographs of dataplates, and other aviation documents. The records are treated as customer property throughout the engagement.
Sparengine does not require records to be cleaned, sorted, or pre processed before they are sent. The processing handles the records as they arrive.
How the records are processed
Records are processed to produce the outputs the customer requested for the engagement, such as a snapshot of the asset, component cards, or a records audit.
The processing reads every page, reconstructs the asset's history, and ties each finding to its source document. The work follows the way an experienced records auditor would approach the dossier, applied consistently across every engagement.
Auditability
Every value Sparengine produces is tied to the source document behind it. Every figure can be opened and checked against the page it came from. The customer can stand in front of a buyer, a lessor, a regulator, or an auditor and answer the one question that decides records work: where is the proof.
AI and automated processing
Sparengine uses AI to deliver the agreed services. Depending on enabled features, this may include document reading, record review, search answers, help chat, reading photographs, voice transcription and generated illustrations. Important findings must be checked against original records; AI can make mistakes or miss information. Customer documents are not used to train public or third party models. Human access to customer records is limited to authorised staff when necessary for support or quality assurance.
Subprocessors and hosting
The customer platform runs on OVHcloud infrastructure, with a self-managed PostgreSQL database and Garage document storage. Cloudflare R2 provides off-server backups. Other providers support AI processing, email, access management and support, as described below.
Some processing or storage may take place outside the European Economic Area, including in the United States. Provider locations and transfer safeguards must be considered across the entire processing chain. Contact us for the arrangements applicable to your organisation.
The providers involved depend on the features enabled for your organisation and the processing route used. Optional AI routes do not apply to every customer or request.
- OVHcloud
Hosts the customer platform, including its self-managed database and document storage.
Information involved: Account information, uploaded records, generated results and operational data.
- Cloudflare
Provides R2 backup storage, DNS services and Access sign-in for the PPI reporting app.
Information involved: Backup copies of records and database information; sign-in and request information for Access-protected services.
- Amazon Bedrock / Google Vertex AI
May serve Claude requests through an enabled AI route. These are optional processing services, not the main platform host.
Information involved: AI request content and responses when the selected route uses these services.
- Resend
Delivers account and service emails, including invitations, password resets, announcements and export notifications.
Information involved: Recipient addresses, message content and links. Export notices may include aircraft names, part numbers and serial numbers.
- Slack
Receives requests for human support and operational alerts.
Information involved: Support messages, contact details, relevant aircraft or page context and operational information.
The marketing website uses separate services, including Tally for forms and Google Analytics and Google Search Console for website performance. Where the marketing website’s separate account features are enabled, Supabase handles their authentication and account information. This is distinct from the customer platform’s self-managed database.
For provider arrangements applicable to your organisation, contact support@sparengine.com.
Security
The platform uses access controls, operational logging and scheduled backups to protect records and support recovery. Sparengine and the providers involved in processing need access to the relevant content to perform the requested work. Contact us for the security arrangements applicable to your service.
Data retention
Retention depends on the purpose of the information, your customer agreement and applicable law. Uploaded records, generated reports, support messages, operational logs and backups may have different retention periods.
Deleting information from the active platform does not necessarily remove it immediately from backups or a provider's systems. Backup locks and separate retention requirements can affect when copies can be removed. Contact us to discuss a deletion request and the arrangements that apply to your records.
Aviation industry context
Sparengine operates in the aviation domain and aligns with industry expectations on confidentiality of operational documentation, traceability and auditability of processing, and security of safety relevant information.
Sparengine does not act as a regulator and does not replace the legal responsibilities of operators, CAMOs, MROs, or other aviation stakeholders.
Updates
This page is updated to reflect changes in regulation, service evolution, or subprocessor changes. The current version is always available on the Sparengine website.
For specific questions about compliance or data use, contact us.