Legal
Sub-processors
These companies help random forest OÜ run Miruto and may process personal data on behalf of our merchants, as described in the Data Processing Agreement. “Active” providers are used for every connected store. The others are used only when the feature is switched on.
Current list
| Company | What it does for Miruto | Location | Status | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting of the console and miruto.app, database (D1), storage (KV, Durable Objects), email routing, access control for the superadmin area | United States; global edge network | Active | Standard Contractual Clauses; EU–US Data Privacy Framework |
| Anthropic, PBC | AI model that writes message drafts, reads the tone of the conversation and suggests fixes for website errors | United States | Active | Standard Contractual Clauses |
| Brevo (Sendinblue SAS) | Sending service emails: sign-in links and hand-over notifications | France, EU | When email is switched on | EU processing |
| Sendblue, Inc. | Sending and receiving iMessage and SMS messages to shoppers | United States | When the store enables iMessage/SMS | Standard Contractual Clauses |
| Meta Platforms Ireland Ltd. | Sending and receiving WhatsApp messages to shoppers (WhatsApp Business Platform) | Ireland, EU; United States | When the store enables WhatsApp | Standard Contractual Clauses; EU–US Data Privacy Framework |
| Stripe Payments Europe, Ltd. | Billing and payments for paid plans | Ireland, EU; United States | When paid plans start | Standard Contractual Clauses; EU–US Data Privacy Framework |
Changes
We inform merchants at least 30 days before we add or replace a sub-processor, by email or in the console, and update this page. Questions: hello@miruto.app.