Skip to content

Subprocessors

Vendors that may process BrandMilo customer data.

Effective date
July 26, 2026
Last updated
July 26, 2026
Version
0.1-draft
Canonical path
/legal/subprocessors

Counsel gate: approved

Approved for the product configuration, providers, jurisdictions, pricing, data flows, and document version 0.1-draft recorded in the COUNSEL_GATE block. Effective date and last updated remain July 26, 2026. Material changes require setting the gate back to review required.

Current and planned list

Vendors below may process BrandMilo customer data when the related feature is enabled. Primary processing region today: United States (us-east-1). United Kingdom (eu-west-2) is a planned backup and disaster-recovery region not an active production region yet.

  • Amazon Web Services, Inc. (AWS) Hosting and infrastructure; account, content, and log data; location United States (us-east-1), United Kingdom planned; purpose: operate the Service; status: planned infrastructure (local/dev uses Docker equivalents today)
  • OpenAI OpCo, LLC OpenAI API AI generation; selected listing data, prompts, and output; purpose: generate content drafts; status: planned until AI generation is enabled in production
  • Google LLC Gemini API Optional AI fallback; selected listing data, prompts, and output; purpose: generate content drafts when configured; status: optional / planned
  • Lemon Squeezy, LLC International subscriptions / Merchant of Record; billing and transaction data; purpose: process payments; status: planned until checkout is enabled
  • Mobilink Microfinance Bank Limited (JazzCash) Planned local wallet/gateway for Pakistan; payment data; purpose: local payments when merchant approval is complete; status: planned
  • Easypaisa Digital Bank Limited (Easypaisa) Planned local wallet/gateway for Pakistan; payment data; purpose: local payments when merchant approval is complete; status: planned
  • Amazon Web Services, Inc. Amazon SES Transactional email; name, email, and message metadata; purpose: send service messages; status: planned until transactional email is enabled
  • PostHog, Inc. PostHog Cloud Product analytics; device and usage data; purpose: improve the product; status: planned disabled until analytics consent and provider wiring
  • Functional Software, Inc. Sentry Error monitoring; technical logs; purpose: reliability and security; status: planned until monitoring is enabled in an environment
  • CookieYes Limited CookieYes Consent management CMP; consent preferences; purpose: record and honor cookie choices; status: planned current consent uses BrandMilo first-party Cookie Preferences (localStorage)

Changes

Business customers may receive notice of material subprocessor changes where required by contract. Subscribe mechanisms will be added when the DPA is finalized.