Sub-processors
A sub-processor is a company that handles personal data on our behalf, under contract with us. This is the complete list. None of them may use your data for their own purposes. Our privacy notice sets out the legal basis for each, and our security page covers how your data is protected.
| Provider | What it does | Where | Safeguard |
|---|---|---|---|
| Amazon Web Services | Hosts Merido and stores your data, including backups | London, UK | Data stays in the UK |
| Auth0, part of Okta | Sign-in | UK | Data stays in the UK |
| Honeycomb | Technical diagnostics, designed to carry no financial detail | Ireland | UK adequacy regulations for the EEA |
| PostHog | In-app usage measurement with all text masked, and optional recordings | Germany | UK adequacy regulations for the EEA |
| Cloudflare | Cookieless analytics for this website only | United States | UK Extension to the EU-US Data Privacy Framework |
| Google Workspace | Email, including anything you send us | United States | UK Extension to the EU-US Data Privacy Framework |
Changes to this list
We update the privacy notice before adding any provider that would handle your personal data, and we move the date at the top of this page with it. Once a year we review each provider's own list of sub-processors for any processing outside the UK or the EEA, and re-confirm the Data Privacy Framework certification of the US providers.
Questions
Email privacy@merido.co.uk.