Sub-processors
Effective: June 3, 2026 · Last updated: October 31, 2026
MantisOps engages the following third-party service providers ("sub-processors") to deliver the Services. Each sub-processor is bound by contract to process customer data only as necessary to provide their service and in line with applicable data-protection law.
Notification of changes. We will notify you by email at least 30 days before adding a new sub-processor that processes customer-identifying data. This page is the authoritative source for the current list — bookmark it or subscribe at
legal@mantidops.com.
Infrastructure
| Sub-processor | Purpose | Data location | Privacy |
|---|
| Cloudflare, Inc. |
Application hosting / compute (Workers), database (D1), object storage (R2), key-value cache (KV), stateful coordination (Durable Objects), scheduled jobs (Workers Cron), DNS, CDN, DDoS protection — the entire MantisOps platform runs on Cloudflare |
Global (US + edge PoPs worldwide) |
Policy |
| Amazon Web Services, Inc. (S3) |
Off-platform backups, encrypted in transit and at rest, kept in a separate cloud account from the production platform: nightly copies of platform databases, and hourly copies of customer files and application binaries. Used only for disaster recovery. |
US (us-east-2, Ohio) |
Policy |
Billing
| Sub-processor | Purpose | Data location | Privacy |
|---|
| Stripe, Inc. |
Subscription billing, payment processing, customer portal |
US |
Policy |
Communications
| Sub-processor | Purpose | Data location | Privacy |
|---|
| Resend |
Transactional email delivery (activation, password reset, billing notifications) |
US |
Policy |
| Brevo (Sendinblue SAS) |
Marketing and product-update email (launch announcements, newsletter, trial onboarding) to people who signed up or opted in, with unsubscribe handling. Holds the recipient's email address, name and email engagement data (opens, clicks, unsubscribes). Not used for sign-up, security or alert mail. |
EU (France, Belgium) |
Policy |
| Quo (formerly OpenPhone) |
Business phone / VoIP — sales & support calls, voicemail, SMS |
US |
Policy |
| Microsoft (Graph API) |
Administrative email send-as for support@mantidops.com |
US |
Policy |
AI-assisted support
| Sub-processor | Purpose | Data location | Privacy |
|---|
| Anthropic, PBC |
AI-assisted support — triaging support requests and drafting replies. Processes the content of support tickets you send us; a MantisOps team member reviews every AI-drafted reply before it is sent, and the content is not used to train Anthropic’s models under our commercial terms. |
US |
Policy |
Status page
| Sub-processor | Purpose | Data location | Privacy |
|---|
| Better Stack |
Hosts the public status page at status.mantidops.com (service status and incident updates). It shows only public service information and holds no customer data. |
Provider-managed |
Policy |
Reference data (public sources we query, no customer data sent)
Public vulnerability and security-update reference data we query to enrich results; no customer data is sent.
Past sub-processors
None at this time.
← Back to MantisOps