Myntriq Subprocessor List
Last Updated: 19 June 2026
Company: Myntriq Pte Ltd (UEN 202537571M), Singapore
Contact: hello@myntriq.io
Overview
Myntriq uses the following third-party service providers (subprocessors) to deliver MyntriqOS. Each subprocessor has been selected based on its security standards, data handling practices, and its ability to support Myntriq's obligations to customers under Singapore's Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).
This list is maintained as a live page and is updated when subprocessors are added, removed, or change their data handling arrangements. Customers subscribed to the Data Processing Addendum (DPA) will be notified of material changes to this list with at least 14 days' notice before the change takes effect.
Infrastructure Subprocessors
Google Cloud Platform
| Field | Detail |
|---|---|
| Purpose | Cloud compute (Cloud Run), secrets management (Secret Manager), container registry (Artifact Registry), and supporting infrastructure |
| Data categories | Application code and container images; encrypted runtime secrets; application logs; system configuration |
| Processing location | Singapore (`asia-southeast1`) |
| Parent company | Google LLC, United States |
| DPA available | Yes — Google Cloud Data Processing Addendum |
| Security certifications | ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, SOC 1, SOC 2, SOC 3 |
| Notes | Primary compute and infrastructure provider. Customer data at rest is stored in Singapore. Google Cloud does not access customer data except as required to deliver contracted services. |
Supabase
| Field | Detail |
|---|---|
| Purpose | Database (PostgreSQL), authentication, file storage, and row-level security enforcement |
| Data categories | Customer organisation data; user accounts and profiles; conversation history; agent configurations; knowledge base metadata; uploaded document references; audit logs; AI usage metrics |
| Processing location | Singapore (`ap-southeast-1`) |
| Parent company | Supabase Inc., United States |
| DPA available | Yes — available from Supabase on request |
| Security certifications | SOC 2 Type II |
| Notes | Supabase is the primary data store for MyntriqOS. Row-level security policies enforce strict tenant isolation — one customer's data cannot be accessed by another. Supabase does not use customer data for any purpose other than providing the database service. |
AI Model Subprocessors
OpenAI
| Field | Detail |
|---|---|
| Purpose | AI model inference (GPT-4o) |
| Data categories | Prompts submitted to GPT-4o agents; conversation messages; knowledge base query text |
| Processing location | United States |
| Parent company | OpenAI, L.L.C., United States |
| DPA available | Yes — OpenAI Data Processing Addendum |
| Notes | Prompts and responses processed under the OpenAI API enterprise terms. OpenAI does not use API data to train its models. Data is processed in the United States; customers should note this cross-border transfer when processing personal data of Singapore residents or EU/EEA individuals. |
Anthropic
| Field | Detail |
|---|---|
| Purpose | AI model inference (Claude) |
| Data categories | Prompts submitted to Claude agents; conversation messages; knowledge base query text |
| Processing location | United States |
| Parent company | Anthropic, PBC, United States |
| DPA available | Yes — available from Anthropic on request for API customers |
| Notes | Prompts and responses processed under Anthropic's API terms. Anthropic does not use API data to train its models under commercial API terms. Data is processed in the United States. |
OpenRouter
| Field | Detail |
|---|---|
| Purpose | AI model inference routing (Llama 3.3 and open-source models) |
| Data categories | Prompts submitted to Llama 3.3 and open-source model agents; conversation messages; knowledge base query text |
| Processing location | United States |
| Parent company | OpenRouter Inc., United States |
| DPA available | Contact OpenRouter directly for DPA terms |
| Notes | Myntriq routes open-source model inference through OpenRouter to access hosted versions of open-source models including Llama 3.3. OpenRouter acts as an inference proxy; the underlying model providers are Meta (Llama) and others. Customers using Llama agents should be aware that prompts pass through OpenRouter before reaching model compute. |
Communication Subprocessors
Resend
| Field | Detail |
|---|---|
| Purpose | Transactional email delivery (contact form notifications, demo request notifications) |
| Data categories | Name, email address, company name, and message content submitted through contact and demo request forms on the Myntriq website |
| Processing location | United States |
| Parent company | Resend Inc., United States |
| DPA available | Contact Resend directly for DPA terms |
| Notes | Resend is used solely for delivering form submission notifications to Myntriq's internal team. Form data is not stored by Resend beyond standard email delivery logs. Platform (MyntriqOS) notification emails may be added in a future version. |
Planned / Conditional Subprocessors
The following subprocessors are listed for planned features that are not yet live in production. They will be activated and this list updated when the associated features are released.
Twilio / Infobip
| Field | Detail |
|---|---|
| Purpose | Messaging channel integration (WhatsApp Business, SMS) for agent communication channels |
| Data categories | Message content and sender/recipient identifiers passed through WhatsApp or SMS channels |
| Processing location | United States / EU (depending on service configuration) |
| Status | Planned — not yet active in production |
| Notes | To be activated when messaging channel features are released. This list will be updated with confirmed DPA details at that time. |
Changes to This List
Myntriq will update this page when subprocessors are added, removed, or materially change their data handling arrangements.
Customers operating under a signed Data Processing Addendum are entitled to object to the addition of a new subprocessor within 14 days of notice. If a customer objects and Myntriq cannot reasonably accommodate the objection, the customer may terminate the affected services.
To be notified of changes to this list, or to request a copy of a subprocessor's DPA, contact hello@myntriq.io.
*Last updated: 19 June 2026*