Subprocessors & Service Providers
Last updated: April 2026
MindPath BI uses the following third-party subprocessors and service providers to deliver the service. This page is maintained as part of our commitment to transparency under GDPR and applicable data protection regulations.
Subprocessors
These entities process customer personal data on our behalf to provide the Service:
| Subprocessor | Purpose | Data Categories | Region |
|---|---|---|---|
| Vercel | Frontend hosting, edge CDN | App metadata, request metadata | Multi-region |
| OVH | Backend infrastructure, database, object storage | All application data | EU (France) |
| Google (Gemini) | Primary AI provider | Thread content, KB documents (processed, not stored) | US/EU |
| Brevo | Transactional email delivery | Email addresses, notification content | EU |
| Sentry | Error tracking | Stack traces, request metadata (no PII) | US |
| ClamAV (self-hosted) | Malware scanning | File content (scanned in-memory, not stored) | Self-hosted |
Service Providers
These entities provide infrastructure and development services but do not process customer personal data:
| Provider | Purpose | Region |
|---|---|---|
| GitHub | Source code hosting, CI/CD | US |
| Docker Hub | Container image registry | US |
| Vercel Analytics | Privacy-friendly, anonymous website analytics | Multi-region |
Vendor Review Cadence
We maintain a formal vendor risk management program:
- Critical subprocessors (infrastructure, AI, database): reviewed semi-annually.
- Important subprocessors (email delivery, error tracking): reviewed annually.
- Standard service providers (container registry, development tools): reviewed at renewal or biennially.
Reviews assess security posture, compliance certifications, data handling practices, and business continuity capabilities.
Change Management
Material changes to our subprocessor list are reviewed by our Security and Legal teams before activation. We provide at least 10 calendar days’ advance notice before engaging a new subprocessor. Customer notification follows contractual notice terms as outlined in your Data Processing Addendum.
Receive Change Notifications
To receive advance email notifications when we add or change subprocessors, contact us at josef@mindpathbi.com with the subject “Subprocessor Change Notifications.”
Questions
If you have questions about our subprocessors, please contact us at josef@mindpathbi.com.