Sub-processors

Last updated: July 2026

Mnemia relies on a small, vetted set of providers (“sub-processors”) to deliver the service. We publish the full list and where each one processes data, because a sub-processor list that matches reality is part of how we earn your trust. Each provider is bound by a data-processing agreement and processes data only on our instructions.

Supabase

• Purpose: database, authentication, and storage.
• Data: all stored data — session and consented sales-conversation content (encrypted at rest), account identities, and business contact details (names, emails).
• Location: Switzerland (AWS Zurich, eu-central-2).

Microsoft Azure OpenAI

• Purpose: speech-to-text transcription, text analysis, founder sales coaching and follow-up drafting, plus document/image processing.
• Data: session or consented sales-call audio and transcript content, processed transiently to produce the requested result. Not retained by the provider and not used to train models.
• Location: transcription in Switzerland (Switzerland North); analysis and document/image processing in the EU (Sweden Central).

Vercel

• Purpose: application hosting and delivery.
• Data: content in transit through the application while you use it.
• Location: global edge network.

Resend

• Purpose: transactional and notification emails (invitations, alerts).
• Data: email addresses and the contents of those emails.
• Location: European Union (Ireland, eu-west-1). Resend, Inc. is a US-incorporated company.

PostHog

• Purpose: limited, cookieless analytics on our public website and during account creation — never inside onboarding or the coach or client workspace.
• Data: a short-lived pseudonymous identifier; sanitised page path; language; selected call-to-action source; landing-page version; broad browser/device category; anonymous sign-up-step status; and the network information needed to deliver the request. No names, email addresses, query strings, tokens, account or client identifiers, form answers, free text, session content, cookies, or cross-site tracking.
• Location: European Union (PostHog EU Cloud, eu.posthog.com).

Where processing happens

Your session and sales-conversation content is stored in Switzerland and processed for AI in Switzerland and the EU. Some transient compute (application hosting and background functions) currently runs on global infrastructure and is being consolidated to Switzerland/EU; email delivery runs in the EU (Ireland). Where data is processed outside Switzerland or the EEA, we rely on appropriate safeguards: in particular Standard Contractual Clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) for transfers from Switzerland and the European Commission’s Standard Contractual Clauses under the GDPR, and for the United States the Swiss-U.S. and EU-U.S. Data Privacy Framework where the recipient is certified.

Changes

We keep this page current. When we add, remove, or change a sub-processor in a way that affects how your data is handled, we update this page and, for material changes, notify account holders.

Questions? Email privacy@mnemia.ch. See also our Privacy Policy and Data Processing Agreement.

This list is being finalised ahead of our public launch and may still change.