Mevrik Ltd engages the third-party sub-processors below to process Customer Personal Data on its behalf, as authorised under clause 5 and Annex 3 of the Data Processing Addendum (mevrik.com/legal/dpa). Each is bound by data-protection obligations no less protective than the DPA.
Mevrik gives at least 30 days' notice of a new sub-processor by updating this list and emailing the account owner. Customers may object on reasonable data-protection grounds within that period.
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services EMEA SARL | Cloud hosting, storage, backups | EU (Ireland) |
| Anthropic PBC | AI model provider | USA |
| Google LLC | AI model provider (Gemini); Gmail and Google Calendar integrations when connected by the Customer; mobile push (FCM) | USA / EU |
| OpenAI LLC | AI model provider | USA |
| Stripe Payments UK Ltd | Payments and invoicing | UK / USA |
| Twilio Inc. | SMS and WhatsApp delivery | USA / EU |
| Resend Inc. | Transactional email (OTP, notifications) | USA |
| Upstash Inc. | Managed cache and queues | USA / EU |
| Meta Platforms Ireland Ltd | Messenger, Instagram and WhatsApp Business APIs when connected by the Customer | EU / USA |
| Microsoft Ireland Operations Ltd | Outlook and Microsoft Calendar integrations when connected by the Customer | EU / USA |
| Shopify International Ltd | Store integration when connected by the Customer | EU / Canada |
| Apple Inc. | Mobile push notifications (APNs) | USA |
AI model providers are contractually prohibited from using Customer data to train or improve their models. Transfers outside the UK are made under the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or to countries with UK adequacy regulations.
Contact:privacy@mevrik.com · Mevrik Ltd, 14 Saville Road, Romford, Essex, RM6 6DT, United Kingdom
Ready to thrive customer experience, increase sales & support?