Sub-processors
A sub-processor is a company that handles personal data on our behalf, under contract with us. This is the complete list. None of them may use your data for their own purposes. Our privacy notice sets out the legal basis for each, and our security page covers how your data is protected.
| Provider | What it does | Where | Safeguard |
|---|---|---|---|
| Amazon Web Services | Hosts Merido, stores your data including backups, and sends sign-in emails | London, UK | Data stays in the UK |
| Auth0, part of Okta | Sign-in | UK | Data stays in the UK |
| Honeycomb | Technical diagnostics, designed to carry no financial detail | Ireland | UK adequacy regulations for the EEA |
| PostHog | In-app usage measurement with all text masked, optional recordings, and a record of what you set up and when you use Merido, with no amounts | Germany | UK adequacy regulations for the EEA |
| Cloudflare | Cookieless analytics for this website only | United States | UK Extension to the EU-US Data Privacy Framework |
| Google Workspace | Email, including anything you send us | United States | UK Extension to the EU-US Data Privacy Framework |
Other companies we tell
Some features send limited information to a company that is not one of our sub-processors. When you look up a car by its registration, we send the registration and mileage to a UK vehicle data provider, which decides for itself, under its own privacy policy, what it does with what it receives — it does not act on our behalf, so it is not on the list above. When you look up a home by its postcode, we send the bare postcode to postcodes.io and to HM Land Registry, on the same footing — neither acts on our behalf either. We disclose both in full in our privacy notice instead.
Changes to this list
We update the privacy notice before adding any provider that would handle your personal data, and we move the date at the top of this page with it. Once a year we review each provider's own list of sub-processors for any processing outside the UK or the EEA, and re-confirm the Data Privacy Framework certification of the US providers.
Questions
Email privacy@merido.co.uk.