Sub-processors
This page lists the sub-processors MNNR LLC engages to deliver the MNNR governance-layer service. We notify customers of material changes (addition of a new sub-processor processing personal data; change of region for an existing sub-processor) at least thirty (30) days in advance via the email of record on the active Order Form.
Current sub-processors
| Sub-processor | Role | Region | Transfer mechanism |
|---|---|---|---|
| Cloudflare, Inc. | Edge serving, DDoS protection, Web Analytics (cookieless), Turnstile, DNS | Global edge; US control plane | SCC + UK IDTA |
| Stripe, Inc. | Billing, payment-link checkout, invoicing, Stripe Tax | US (control plane); EU regional processing | SCC; Stripe DPF certification where applicable |
| Google LLC (Google Workspace) | Operational email, calendar, drive for internal collaboration | US (control plane); EU regional storage where configured | SCC; Google DPF certification |
| Netlify, Inc. | Application hosting for app.mnnr.app | US | SCC |
| Amazon Web Services, Inc. | Service production data residency for EU customers | EU primary (eu-central-1 Frankfurt) | EU-resident processing; SCC for any cross-border |
| Clerk, Inc. | Authentication, identity, session management | US | SCC |
| Supabase, Inc. | Postgres database, real-time, storage | EU regional projects for EU customers; US for US-only customers | EU-resident for EU; SCC for cross-border |
| Resend (Plus Five Five, Inc.) | Transactional email delivery (form confirmations, product and regulator updates) | US | SCC |
| GitHub, Inc. | Source code repository, CI/CD, audit-archive of public cryptographic keys | US | SCC; Microsoft DPF certification |
| Namecheap, Inc. | Domain registration | US | SCC |
Sub-processors used only at customer instruction
- Vercel, Inc. — alternative app hosting for select customer deployments.
- Sentry — error monitoring (when enabled).
- OpenAI, Anthropic, Google (Gemini) — AI-assist features under business-tier no-training contracts, only on customer opt-in.
How to receive change notices
By default, all material changes are sent to the email of record on the active Order Form at least thirty (30) days in advance. Customers may also subscribe to a dedicated list at privacy@mnnr.app.
How to object to a new sub-processor
If Customer reasonably objects to a new sub-processor on documented data-protection grounds within thirty (30) days of notice, MNNR will work in good faith to (a) provide a substitute mechanism or (b) allow Customer to terminate the affected Service component with pro-rated refund of prepaid fees for the unused period.
Contact
Privacy: privacy@mnnr.app · Legal: legal@mnnr.app · MNNR LLC, 1603 Capitol Ave, Suite 413 PMB #1750, Cheyenne, WY 82001.