Last Updated: 18 September 2026
This page lists the sub-processors that Matainable Ltd ("Matainable") uses to process personal data on behalf of its customers in providing the Matainable platform. Matainable engages them under clause 7 of the Data Processing Agreement at https://www.matainable.com/legal/dpa. How Matainable handles personal data for its own purposes is described in the Privacy Policy at https://www.matainable.com/legal/privacy.
Customer data is held in the United Kingdom (database) and Sweden (files). Where a sub-processor is outside the UK or the EEA, the last column shows the transfer safeguard relied on.
| Sub-processor | Purpose | Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Xano, Inc. | Platform backend and database hosting | All platform data | United Kingdom hosting region; US contracting entity | Hosted in the UK; any support access from the US is covered by the provider's data processing terms (EU Standard Contractual Clauses with the UK Addendum), copies on request |
| Amazon Web Services EMEA SARL | File storage (S3, eu-north-1 Stockholm) | Uploaded documents and images | Sweden | UK adequacy regulations for the EEA |
| Stripe Payments Europe, Ltd. with Stripe, LLC | Billing and subscriptions | Name, email, company, payment details (held by Stripe) | Ireland and United States | UK adequacy for the EEA (Stripe Payments Europe, Ireland); EU-US Data Privacy Framework with UK Extension (Stripe, LLC) |
| AC PM, LLC (Postmark, an ActiveCampaign company) | Transactional and opted-in marketing email | Name, email, message content | United States | Data Privacy Framework with UK Extension; UK Addendum to the EU Standard Contractual Clauses |
| PostHog, Inc. (EU cloud) | Server-side product analytics | Pseudonymised usage events (email domain only) | European Union | UK adequacy regulations |
| Anthropic, PBC | AI assistant, product assistant and passport chat answers, catalogue import, signup enrichment | Text submitted to AI features | United States | Provider's data processing terms (EU Standard Contractual Clauses with the UK Addendum), copies on request; no training on customer data; 30-day log retention |
| Voyage AI (MongoDB, Inc.) | Text embeddings and relevance ranking for AI search | Assistant questions and procurement labels | United States | Provider's data processing terms (EU Standard Contractual Clauses with the UK Addendum), copies on request; model-training opt-out enabled on our Voyage AI account, so submitted text is not retained or used for training |
| Langfuse GmbH | AI observability and quality monitoring | Assistant questions and answers, usage metadata | Germany | UK adequacy regulations |
| WeWeb SAS | Web application hosting | Page requests | France | UK adequacy regulations |
| Cloudflare, Inc. | Edge delivery and security for public passport pages, demos and the anti-bot check | Request metadata, IP address | Global edge network; US entity | Data Privacy Framework with UK Extension |
QuickChart.io generates QR code images from passport URLs and receives no personal data.
Matainable gives at least 14 days' notice before adding or replacing a sub-processor, as set out in clause 7 of the Data Processing Agreement. Notice is given by updating this page and by emailing each customer's account administrator. The "Last Updated" date above matches the most recent entry in the change log.
If you have questions about our sub-processors, please contact us at admin@matainable.com.
Matainable Ltd
3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE
Company Registration Number: 16543039
Sustainable Materials, Now Attainable
© 2026 Matainable. All rights reserved
Matainable Ltd. CRN: 16543039
3rd Floor, 86-90 Paul Street
London, England
United Kingdom,
EC2A 4NE