Sub-Processors

Sub-Processor List

Last Updated: [20/05/2026]

This page lists the sub-processors that Matainable Ltd ("Matainable") engages to process personal data on behalf of its customers in connection with the Matainable platform. This list is maintained in accordance with our Data Processing Agreement and Privacy Policy.

Matainable will provide at least 14 days' advance notice of any changes to this sub-processor list by updating this page and notifying affected customers by email. If you object to a new sub-processor, you may notify us within that 14-day period in accordance with the objection procedure set out in our Data Processing Agreement.

Current Sub-Processors

Sub-Processor	Purpose	Personal Data Processed	Location of Processing	Transfer Mechanism
Xano, Inc. xano.com	Backend infrastructure, database hosting, and API services	All Platform data including account data, company data, material/product data, Digital Product Passport data, supply chain data, B2B messaging data	European Union	N/A (EU processing)
Stripe, Inc. stripe.com	Payment processing and subscription billing	Name, email address, payment transaction data, invoice data, billing address	European Union / United States	EU-US Data Privacy Framework; Standard Contractual Clauses (SCCs)
Wildbit LLC (Postmark) postmarkapp.com	Transactional email delivery (account confirmations, password resets, notifications)	Email address, name, email content	United States	Standard Contractual Clauses (SCCs)
PostHog, Inc. posthog.com	Product analytics (with user consent)	Usage data, anonymised/pseudonymised user identifiers, session data, pages viewed	European Union	N/A (EU processing)
Anthropic PBC anthropic.com	AI assistant processing (conversational AI, document extraction, material enrichment)	AI chat queries, contextual product/material data submitted to AI features	United States	Standard Contractual Clauses (SCCs)
Amazon Web Services, Inc. (AWS S3) aws.amazon.com	File and image storage	Uploaded files, product images, certification documents	European Union	N/A (EU processing)
WeWeb SAS weweb.io	Frontend hosting and delivery	Minimal (frontend application assets only; no personal data at rest)	European Union	N/A (EU processing)
Cloudflare, Inc. cloudflare.com	Content delivery network (CDN), DNS resolution, DDoS protection, and security services	IP address, HTTP request metadata (transient processing only)	Global (nearest edge node)	EU-US Data Privacy Framework; Standard Contractual Clauses (SCCs) where applicable

Notes

Data Processing Agreements: Matainable has entered into data processing agreements with each sub-processor listed above that include obligations substantially equivalent to those set out in our Data Processing Agreement with customers.

Transfer Impact Assessments: Where personal data is transferred to sub-processors outside the UK or EEA, Matainable has conducted Transfer Impact Assessments to evaluate the level of data protection in the recipient country and to identify any supplementary measures required.

Anthropic — AI Data Retention: Anthropic may retain API request logs for up to 30 days for safety and abuse monitoring purposes in accordance with their commercial API terms. Anthropic does not use customer data submitted via their API to train their models.

Cloudflare — Transient Processing: Cloudflare processes request data transiently at the nearest edge node to serve content and provide security services. Personal data (IP addresses, request metadata) is not persistently stored beyond what is necessary for security logging.

Change Log

Date	Change
[INSERT DATE]	Initial publication of sub-processor list.

Contact

If you have questions about our sub-processors or wish to exercise your objection rights under the Data Processing Agreement, please contact us at admin@matainable.com.

Matainable Ltd
3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE
Company Registration Number: 16543039