StackLégal

Tools and automation

GDPR Algolia

In an indie stack, Algolia is used for Search in the application. Entity cited: Algolia SAS for subscribers in Europe; Algolia, Inc. for subscribers outside Europe. The sections repeat what the vendor publishes, without filling a gap. Last update of the facts: October 4, 2026. Verified on October 4, 2026.

Translation of the French sheet. The facts do not change. The date is the date the official pages were read.

DPA Algolia

Yes. Public Data Processing Addendum.

Read the DPA

Stated role

For subscriber personal data processed on instruction, the subscriber is controller and Algolia is processor, or sub-processor if the subscriber is itself a processor. The policy also covers information that Algolia collects as controller or business.

Personal data

First name, last name, title, personal and business contact details, network connection data, IP address, location indicated by the IP, end-user identifier (IP address and userToken), queries, events, search logs, browser type and settings, usage data, cookie identifiers.

Sub-processors of Algolia

Infrastructure and sub-processors page.

List published by the vendor

Transfers outside the EU

Hosting / location

Algolia indicates a global infrastructure, with hosts whose cited headquarters include the United States, the Netherlands, France, and Brazil. The policy states that personal information may be moved, processed, and stored in the United States and in any country where Algolia operates.

EU–United States Data Privacy Framework

Official search for “Algolia”, “Algolia Inc”, and “Algolia, Inc.”: no participant. Not registered.

Cookies

Algolia and partners use cookies or similar technologies, such as web beacons, to collect information, analyze trends, administer the sites and services, and track movements. A cookies policy is published.

Typical use, written by StackLégal and not by the vendor: Search in the application.

History

Last update: October 4, 2026.

  1. First publication. The facts come from the official pages cited in the sources. Anything not stated there remains "not disclosed".

Clause to paste

Place it in the sub-processor section of your privacy policy. Review it: a “not disclosed” field must be completed before publication.

Sub-processor clause

Add this vendor to your free sub-processors widget

Sources

Verified on October 4, 2026.

Frequently asked questions

Is Algolia a processor within the meaning of the GDPR?

For subscriber personal data processed on instruction, the subscriber is controller and Algolia is processor, or sub-processor if the subscriber is itself a processor. The policy also covers information that Algolia collects as controller or business.

What DPA does Algolia publish?

Yes. Public Data Processing Addendum. https://www.algolia.com/policies/data-processing-addendum

Which further sub-processors does Algolia publish?

Infrastructure and sub-processors page. https://www.algolia.com/policies/infrastructure-and-sub-processors

Where does Algolia state that it processes data, including outside the EU?

Algolia indicates a global infrastructure, with hosts whose cited headquarters include the United States, the Netherlands, France, and Brazil. The policy states that personal information may be moved, processed, and stored in the United States and in any country where Algolia operates.

Is Algolia registered under the EU–United States Data Privacy Framework?

Official search for “Algolia”, “Algolia Inc”, and “Algolia, Inc.”: no participant. Not registered.

Which personal data does Algolia mention?

First name, last name, title, personal and business contact details, network connection data, IP address, location indicated by the IP, end-user identifier (IP address and userToken), queries, events, search logs, browser type and settings, usage data, cookie identifiers.

Often in the same stack

These sheets come up in searches for a Next.js SaaS. Next.js itself is not a processor: GDPR Next.js.

Related tools

All the sheets tools and automation

Full pack, from 39 € incl. VAT

The clause above covers only one tool. StackLégal generates the legal notices, terms of use, terms of sale, privacy policy, Article 28 DPA, and the public list, naming only the boxes that are checked. One-time payment via Gumroad. This is not legal advice.