LEGALSubprocessors
Subprocessor List
We use the service providers listed below to run the Mawidi platform. We execute data processing agreements with each provider, and this list is updated whenever a provider is added or replaced.
For questions about this list, please contact us at privacy@mawidi.com.
Last Updated: July 14, 2026
| Provider | Purpose | Data categories | Location | Safeguard |
|---|---|---|---|---|
| Clerk, Inc. | Authentication and account sign-in | Name, email, phone, session data | United States | Standard Contractual Clauses (in progress) |
| Convex, Inc. | Primary application database | All account, booking, and conversation records | Region under confirmation | Standard Contractual Clauses (in progress) |
| Stripe, Inc. | Payment processing and subscription billing | Billing name, email, tokenized payment reference | United States (global infrastructure) | Standard Contractual Clauses (in progress) |
| Twilio Inc. | Phone, SMS, and WhatsApp message transport | Phone numbers, call metadata, message content | United States (global infrastructure) | Standard Contractual Clauses (in progress) |
| ElevenLabs, Inc. | AI voice agent speech synthesis, call recording, and transcription | Call audio recordings and transcripts | Region under confirmation | Standard Contractual Clauses (in progress) |
| Meta Platforms, Inc. (Pixel, Conversions API, WhatsApp) | Ad measurement and WhatsApp Business message transport | Hashed contact details; WhatsApp message content and phone numbers | United States / global (Ireland entity for EEA users) | Standard Contractual Clauses (in progress) |
| Google LLC (Analytics, Ads, Gemini) | Web analytics, ad conversion tracking, and AI knowledge-base search | Pseudonymous analytics identifiers; knowledge-base document content | United States / global | Standard Contractual Clauses (in progress) |
| PostHog, Inc. | Product analytics and session recording | Usage events; masked session recordings | United States | Standard Contractual Clauses (in progress) |
| Functional Software, Inc. (Sentry) | Application error monitoring | Error stack traces and request metadata | United States | Standard Contractual Clauses (in progress) |
| Anthropic, PBC | AI lead research, dialect translation, and setup assistance | Lead name, email, and company name | United States | Standard Contractual Clauses (in progress) |
| OpenAI, L.L.C. | AI image generation | Generation prompts | United States | Standard Contractual Clauses (in progress) |
| OpenRouter, Inc. | AI model routing for the WhatsApp engine and call-quality analysis | WhatsApp conversation history; call transcripts | Downstream hosting not fully disclosed by provider | Standard Contractual Clauses (in progress) |
| Pinecone Systems, Inc. | Vector database for knowledge-base search | Vector embeddings of uploaded knowledge-base documents | United States | Standard Contractual Clauses (in progress) |
| Resend | Transactional and account email delivery | Recipient name, email address, and message content | United States | Standard Contractual Clauses (in progress) |
| Upstash, Inc. | Rate-limiting infrastructure | Rate-limit bucket keys, not durable personal data | Region under confirmation | Standard Contractual Clauses (in progress) |
| Amazon Web Services, Inc. (AWS) | Application hosting and backups | All application data while hosted | eu-west-1 (Ireland) | EU hosting region; transfer review in progress |
| Google LLC (reCAPTCHA) | Bot and spam protection on public forms | Browser and device signals, IP address | United States / global | Covered under Google's standard terms |