Sub-processors
Third-party services that process data on behalf of MentionFox
Last updated: April 2026
Current Sub-processors
MentionFox engages the following sub-processors to provide and improve the service. This list is kept up to date and will be updated when sub-processors are added or removed.
| Sub-processor | Purpose | Data Location | Data Processed |
|---|---|---|---|
| Supabase (AWS) | Database, authentication, edge functions | Tokyo, Japan (ap-northeast-1) | All account and service data |
| Vercel | Frontend hosting, CDN, edge functions | Global edge network | Static assets, routing |
| Stripe | Payment processing, subscription management | United States, EU | Payment method, billing info |
| Anthropic (Claude) | AI enrichment, dossier generation, content analysis | United States | Names, public profile data for analysis |
| DeepSeek | AI processing for GEO engine and analysis | China | Public web content for analysis |
| Resend | Transactional email delivery | United States | Email addresses, message content |
| Serper | Search API for enrichment and content discovery | United States | Search queries (names, domains) |
| SocialData | Twitter/X data retrieval for social listening | Europe | Public social media posts |
| ZeroBounce | Email address verification | United States | Email addresses for validation |
| Umami | Privacy-friendly website analytics | EU (cloud-hosted) | Anonymized page views only |
| Cloudflare | DNS, CDN, DDoS protection | Global edge network | Network routing data |
Changes to Sub-processors
We will update this page when sub-processors are added, removed, or when their role changes materially. For customers with a signed Data Processing Agreement, we will send email notification at least 14 days before engaging a new sub-processor that processes personal data.
If you object to a new sub-processor, you may terminate your MentionFox subscription without penalty within 30 days of notification by contacting legal@mentionfox.com.
Sub-processor Security Standards
All sub-processors are selected based on their security practices and compliance posture. Key certifications held by our primary sub-processors include:
| Sub-processor | Certifications / Compliance |
|---|---|
| Supabase (AWS) | SOC 2 Type II, ISO 27001, GDPR |
| Vercel | SOC 2 Type II, GDPR |
| Stripe | PCI DSS Level 1, SOC 2 Type II, GDPR |
| Anthropic | SOC 2 Type II |
| Cloudflare | SOC 2 Type II, ISO 27001, GDPR |