Heroku does not control where add-on providers store data. This is because Heroku operates in various regions but does not manage the physical storage of data for third-party add-ons. Since these add-ons are managed by external providers, they have their own data residency policies and practices, which are outside the control of Heroku. Therefore, the enforcement of data privacy and GDPR compliance will heavily rely on the third-party providers' compliance measures.
Changing the type of dynos to standard-2x is the recommended approach. The issue at hand is that the worker dynos are running out of memory, which means they require more resources for the complex image processing tasks. Upgrading to a higher capacity dyno, such as standard-2x, provides additional memory and CPU, which should address the memory constraints without necessarily needing to refactor the application to run on multiple dynos or move to a different infrastructure.
Heroku Private Spaces and Private Space VPN Connections are the appropriate combination to secure the connection between Heroku and Google Cloud Platform (GCP). Heroku Private Spaces provides a secure and isolated network environment for applications, while Private Space VPN connections enable a secure site-to-site VPN connection compatible with Google Cloud VPN, ensuring secure communication between Heroku and GCP infrastructure.