Updated: 2026-10-20 · v1.2
These are the third-party vendors (sub-processors) that process personal data on behalf of Multiverbe to deliver the service. We update this list when it changes and notify paid-plan customers with 30 days' notice.
| Vendor | Service | HQ | Data | Transfer basis | Certifications |
|---|---|---|---|---|---|
| Supabase Inc. | Database, authentication, storage, edge functions | USA | EU · Frankfurt | SCC UE | SOC 2 II |
| Vercel Inc. | Frontend hosting, CDN, edge network | USA | Edge EU + USA | SCC UE | SOC 2 II |
| Anthropic PBC | Generative AI (Claude), PII pseudonymized before sending | USA | USA | SCC UE | n/a |
| Stripe Inc. | Payments CHF/EUR, subscriptions, invoicing | USA | EU + USA | SCC UE | PCI DSS L1 |
| Sendinblue SA (Brevo) | Transactional email (confirmations, notifications, onboarding) | FR | EU | GDPR Art. 28 | ISO 27001 |
| Mistral AI SAS | AI for email outreach, EU data only | FR | EU | GDPR Art. 28 | n/a |
| Replicate Inc. | AI image generation for the site builder | USA | USA | SCC UE | n/a |
| Moonshot AI | AI Kimi (site builder), anonymous prompts only | CN/USA | USA | SCC UE | n/a |
| Perplexity AI, Inc. | AI visibility engine (Sonar), controlled internal access | USA | USA | SCC UE | n/a |
| Google LLC | AI models (text, images, video) for customer content | USA | EU · europe-west1 · video USA | DPF + SCC UE | ISO 27001 |
| Google LLC | Measurement tag loading, only after consent | USA | EU + USA | DPF + SCC UE | ISO 27001 |
| Microsoft Corp. | Usage analytics and session recording, only after consent | USA | EU + USA | DPF + SCC UE | ISO 27001 |
| Google LLC | Site visit statistics (Google Analytics 4), only after consent | USA | EU + USA | DPF + SCC UE | ISO 27001 |
| Register S.p.A. | The info@ and privacy@multiverbe.com mailboxes | IT | EU | GDPR Art. 28 | n/a |
Being activated
Google LLC, Google Business Profile API: NAP and review sync for customers who connect their Google profile (USA · EU SCC). Not yet active: the adapter is awaiting Google's API access approval.
Google LLC, Google Ads: ad conversion measurement, also with email and phone as a hash, only with Marketing consent (USA · EU SCC). Not active yet: starts with the first campaign.