Trust
Subprocessors
Last updated
A complete and current list of sub-processors Mentionwell engages to deliver the Service. This list is referenced from the Mentionwell DPA. We give at least fifteen (15) days' notice before adding a new sub-processor; subscribe to changes by emailing admin@mentionwell.com.
The table below lists every third-party service we use that processes Customer Data, what they process, the categories of data, and where they operate. International transfers are governed by the SCCs incorporated into our DPA at /dpa.
| Vendor | Purpose | Categories of data | Region |
|---|---|---|---|
| Railway | Application + worker hosting; managed Postgres | Account data, configuration, generated content, telemetry | United States |
| Cloudflare | CDN, DDoS protection, R2 object storage for generated images | Generated images, request metadata | Global edge |
| Vercel | Marketing site + dashboard CDN hosting | Page-view telemetry, request metadata | Global edge |
| Supabase | Authenticated database + RLS (selected workspaces) | Account data, configuration | United States |
| OpenRouter | LLM inference router (Anthropic, OpenAI, Google, Meta, etc.) | Prompt + completion content for generation | United States |
| Anthropic | Claude inference (planning, drafting, reflection) | Prompt + completion content for generation | United States |
| OpenAI | GPT inference (selected stages); image generation (gpt-image) | Prompt + completion content; image generation prompts | United States |
| Google (Gemini) | Gemini inference (selected stages); GSC + GA OAuth integrations | Prompt + completion content; GSC/GA scope tokens | United States |
| FAL | Image generation runtime (selected models) | Image-generation prompts | United States |
| Firecrawl | Web scraping for cited-page evidence extraction | Public URLs only | United States |
| Exa | Neural web search for the AEO Exa engine + research | Search queries | United States |
| Serper | SERP data for research stage | Search queries | United States |
| Stripe | Subscription billing + payment processing | Billing email, payment metadata (no card data stored by us) | United States |
| Resend | Transactional email delivery (welcome, digest, alerts) | Recipient email + email body | United States |
| Sentry | Application error monitoring | Stack traces, redacted request metadata | United States |
| Cal.com | Demo booking | Name, email, time-zone, calendar selection | United States |
| Infisical | Secret management for engineering operations (no Customer Data) | Operational credentials only | United States |
Have a vendor question that’s blocking procurement? Email admin@mentionwell.com and we’ll respond within two business days with a current vendor list and any context your security team needs.