Subprocessors
The companies we use to run Mittral that may process customer personal data on our behalf.
| Provider | What they do | Data | Entity and location |
|---|---|---|---|
| Cloudflare | Hosting of the Mittral app and website: application servers, database, file storage, queues and network security. | All customer data, including attachments and PO PDFs; request logs with IP addresses. | Cloudflare, Inc. and its affiliates. The database and files are held in Western Europe; requests are served from Cloudflare’s global network. |
| WorkOS | Sign-in and identity: accounts, passwords, email verification, multi-factor authentication, organisations and invitations. | Users’ names, email addresses, sign-in activity and IP addresses; workspace names. | WorkOS, Inc., United States. |
| Stripe | Subscription billing and payments. | Billing contact, billing address, tax ID, payment card details (held by Stripe, not by us), invoices. | Stripe Payments UK, Ltd and its affiliates. United Kingdom, Ireland and the United States. |
| Resend | Sending email: notifications to users and purchase orders to suppliers. | Recipient names and addresses, email content and attached PO PDFs and files. | Resend (Plus Five Five, Inc.), United States. |
We will tell workspace admins about a new subprocessor at least 30 days before it starts processing customer data, so you can object as described in the Data Processing Agreement.
Our providers may process personal information outside the United Kingdom and the European Economic Area, mainly in the United States. Where they do, and the country is not covered by a UK or EU adequacy decision, the transfer is protected by the safeguards in our agreements with them: the UK International Data Transfer Addendum or the EU standard contractual clauses, or the provider’s certification under the UK–US Data Bridge and the EU–US Data Privacy Framework.