Last updated: July 20, 2026
We engage the following service providers as sub‑processors to support hosting, infrastructure, authentication, storage, and AI functionality. Each processes personal information on our behalf under contractual obligations, including confidentiality and data protection commitments.
Vercel, Inc.
- Role: Hosting, CDN, build/deploy platform
- Primary locations: EU/US (regions vary by deployment configuration)
- Transfer mechanism: EU Standard Contractual Clauses; UK IDTA/Addendum; Swiss adaptations; or Data Privacy Framework where applicable
Supabase
- Role: Database, authentication, storage
- Primary locations: Region selected during project setup (EU/US options); backups may be regional
- Transfer mechanism: EU Standard Contractual Clauses; UK IDTA/Addendum; Swiss adaptations; regional hosting where available
Railway
- Role: Application hosting and backend data processing
- Primary locations: Deployment region selected by Mavr
- Transfer mechanism: Contractual safeguards, including EU Standard Contractual Clauses where applicable
OpenAI
- Role: AI inference for application features
- Primary locations: US/EU depending on API configuration and model availability
- Transfer mechanism: EU Standard Contractual Clauses; UK IDTA/Addendum; Swiss adaptations; or Data Privacy Framework where applicable
Google Cloud / Gemini
- Role: AI inference for application features
- Primary locations: Processing locations depend on the API configuration and model availability
- Transfer mechanism: EU Standard Contractual Clauses and other applicable contractual safeguards
We implement supplementary safeguards (e.g., encryption in transit and at rest, access controls, data minimization). We will update this list if we add or replace sub‑processors for relevant services.
Questions? Contact info@mavr.app.