Subprocessors
Effective 2026-11-04 · Last updated 2026-11-04
These are the service providers that process personal data on our behalf to provide MillCerts. Each is bound by a written contract that requires it to protect the data and use it only to provide its service to us. This list forms part of our Data Processing Addendum.
In plain English: The companies that help us run MillCerts, what they do, and where.
| Subprocessor | Legal entity | Purpose | Data processed | Location |
|---|---|---|---|---|
| Amazon Web Services | Amazon Web Services, Inc. | Cloud hosting: application servers, database, file storage, transactional email and backups | All service data | United States |
| Neon | Neon, LLC (a Databricks company) | Managed Postgres database hosting | All service data stored in the database | United States |
| Vercel | Vercel Inc. | Hosting and content delivery for the website and web dashboard | Web requests (IP address, browser details) and page content | United States and a global edge network |
| Cloudflare | Cloudflare, Inc. | DNS, content delivery and protection against attacks | IP addresses and request metadata | Global network |
| Stripe | Stripe, Inc. | Subscription billing | Billing contact details, payment details entered directly with Stripe, payment amounts and status | United States and other countries where Stripe operates |
| Microsoft 365 | Microsoft Corporation | Business email for support and account correspondence | Emails you send us and our replies | United States |
| Anthropic | Anthropic, PBC | AI reading of the documents a business uploads or forwards | Certificates, purchase orders and customer clauses sent for reading. Limits a business enters are never sent. | United States |
1. Changes to this list
We will update this page and email the account owner of each business at least 30 days before a new subprocessor starts processing personal data, except where we must act sooner to keep the Service secure or available, in which case we will tell you as soon as we can. If you have a reasonable data-protection objection to a new subprocessor, email hello@millcerts.com within that period; we will work with you in good faith to address it, and if we cannot, you may close the affected part of your account without penalty.
Questions about our subprocessors: hello@millcerts.com.