Last updated: April 28, 2026
Mithra uses the following third-party service providers (“Subprocessors”) to process Customer Personal Data in connection with the Services.
This page is incorporated by reference into Mithra’s Data Processing Addendum. Mithra may update this page from time to time. Where required by the DPA, Mithra will provide prior notice of new or replacement Subprocessors and an opportunity to object on reasonable data protection grounds.
| Subprocessor | Service / Legal Entity | Purpose | Customer Personal Data | Customer Data | Location / Region | Role | Status | Vendor link |
|---|---|---|---|---|---|---|---|---|
| OpenAI | OpenAI, L.L.C. | AI inference and document-processing services | Limited personal data in prompts, contract excerpts, outputs, and metadata | Contract excerpts, extracted fields, prompts, outputs, metadata | As described in vendor terms | AI service provider / subprocessor | Active | OpenAI privacy and DPA |
| Anthropic | Anthropic, PBC | AI inference and document-processing services | Limited personal data in prompts, contract excerpts, outputs, and metadata | Contract excerpts, extracted fields, prompts, outputs, metadata | As described in vendor terms | AI service provider / subprocessor | Active | Anthropic trust center |
| Supabase | Supabase, Inc. | Database, authentication, storage, and backend services | User names, business emails, login metadata, and limited personal data in Customer Data | Application records, uploaded files, metadata | As configured / vendor terms | Infrastructure provider / subprocessor | Active | Supabase DPA |
| Fly.io | Fly.io, Inc. | Hosting and infrastructure | Application data, logs, and metadata | Application data, files, metadata | As configured / vendor terms | Infrastructure provider / subprocessor | Active | Fly.io privacy policy |
| Postmark | ActiveCampaign, LLC / Postmark | Transactional email delivery | Names, email addresses, email content, and notification metadata | Notification content and delivery metadata | As described in vendor terms | Email provider / subprocessor | Active | Postmark privacy policy |
| Microsoft | Microsoft Corporation / Microsoft 365, SharePoint, Graph | Customer document integration | User account data, document metadata, and limited personal data in documents | Documents and document metadata | As configured / vendor terms | Integration provider / subprocessor | Active | Microsoft privacy and DPA resources |
| Google LLC / Google Cloud, Workspace, AI services | Cloud, AI, or productivity services | User data, document data, prompts/outputs, and metadata as applicable | Customer Data as applicable | As configured / vendor terms | Cloud, AI, or integration provider / subprocessor | Active | Google Cloud data processing and security terms | |
| PostHog | PostHog, Inc. | Product analytics and telemetry | User/account identifiers, usage events, and device/browser metadata | Usage metadata | As configured / vendor terms | Analytics provider / subprocessor | Active | PostHog privacy and DPA |
| Vercel | Vercel Inc. | Application hosting and delivery | Application traffic, logs, and metadata as applicable | Application data as applicable | As configured / vendor terms | Hosting provider / subprocessor | Active | Vercel privacy and security |
| Temporal | Temporal Technologies Inc. / Temporal Cloud | Workflow orchestration | Workflow metadata, user/account identifiers, and document-processing metadata | Workflow payloads and metadata | As configured / vendor terms | Workflow orchestration provider / subprocessor | Active | Temporal trust center |
| LangSmith | LangChain, Inc. / LangSmith | LLM tracing, debugging, evaluation, and observability | Prompts, outputs, traces, and metadata if enabled | Prompts, outputs, traces, evaluation data | As configured / vendor terms | Observability provider / subprocessor | Active | LangChain privacy policy |
| Trellis | Trellis Insights Inc. / Trellis | Document workflow automation and data extraction services, if enabled | User/account identifiers, document metadata, and limited personal data in Customer Data if enabled | Customer Data as applicable | As configured / vendor terms | Service provider / subprocessor | Active | Trellis privacy policy |
Customers may object to a new or replacement Subprocessor as described in Mithra’s Data Processing Addendum by contacting: [email protected].