Subprocessors
Last updated: July 2026
In accordance with GDPR Art. 28.2, this page lists every third-party that processes personal data on behalf of MailMCP customers. We update this list when subprocessors change. To be notified of changes, email privacy@mailmcp.io.
1. Infrastructure & hosting
2. AI inference (OpenRouter routing)
All AI calls are routed through OpenRouter to EU-resident providers only. Providers are contractually barred from training on our data and operate in zero-retention mode; fallback to any non-EU provider is refused.
| Subprocessor | Purpose | Location | Coverage |
|---|---|---|---|
|
OpenRouter OpenRouter, Inc. |
AI inference gateway. Routes our calls to EU-resident model providers. Does not retain prompts or responses. |
🇺🇸 USA Gateway only (no storage) — actual inference happens at downstream EU providers below |
SCCs · Zero retention Privacy |
|
Microsoft Azure OpenAI GPT-4o-mini |
Chatbot, support reply assistance, outreach pitch generation. |
🇸🇪 Sweden · 🇫🇷 France Sweden Central / France Central |
ISO 27001 · SOC 2 · GDPR DPA |
Explicitly NOT used: DeepSeek (China), Moonshot, Qwen, any non-EU-resident provider. Our OpenRouter routing config refuses them.
3. Payment
Payments are handled by our Merchant of Record:
4. What we do NOT use
- No analytics tracker (no Google Analytics, no Plausible, no Matomo on the public site).
- No advertising network, no behavioral tracking, no cookie consent banner needed (only strictly necessary cookies).
- No US cloud (no AWS US, no GCP US, no Azure US — all our infrastructure is in the EU).
- No AI training on your data. OpenRouter and downstream providers operate in zero-retention mode for our calls.
© 2026 MailMCP — STAY WEB (SASU). All rights reserved.
