Subprocessors
Softriq Ltd uses the following third parties to provide Memlira. Each one processes only what it needs for its purpose, under a written agreement with data protection terms.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Contabo GmbH | Hosting the application, database and files | All Customer Data, on encrypted disks | Germany (EU) |
| Cloudflare, Inc. | DNS, TLS and protection in front of the Service | Network traffic, including request content while in transit | Global network |
| OpenAI, L.L.C. | Understanding questions, writing answers, suggesting column mappings, and transcribing voice questions | Question text; names of data types and fields, metric definitions and company terms; column headers and the format of a few values when mapping a file; voice recordings, deleted right after transcription. No values from Customer systems | United States |
| Anthropic, PBC | Backup model for the same tasks except transcription, used only when the main model is unavailable | Same as OpenAI, without voice | United States |
| Amazon Web Services EMEA SARL (Amazon SES) | Account, security and notification emails | Recipient name and email address; email content, which never includes values from Customer Data | Germany (EU, Frankfurt region) |
| Functional Software, Inc. (Sentry) | Error diagnostics for the app and dashboard | Technical error reports with personal information removed; no question or answer text | European Union (EU data region) |
| Stripe | Payments, subscriptions and tax calculation for plans billed by Softriq | Account email and name, billing details, and card details (entered directly with Stripe, never on our servers) | United Kingdom, European Union and United States |
| Apple Inc. (APNs) and Google LLC (Firebase Cloud Messaging) | Delivering push notifications to the mobile apps | Device token and a short notification with no figures, customer names, sources or workspace names | United States |
Not used: we do not use any other AI provider with Customer Data. A new model provider is added only after it passes our privacy review, and is announced here first.
Not subprocessors: WooCommerce (on your own website), Shopify and Salla are where your data comes from. If your plan is billed by Shopify or Salla, that platform handles the payment under its own terms.
Website: our public pages use no analytics and set no cookies (see the Cookie Policy).
Changes
We give at least 14 days' notice before adding or replacing a subprocessor, by email to workspace owners and on this page. You can object as described in section 8 of the Data Processing Agreement. To ask about this list, contact [email protected].