This page lists the third-party sub-processors that DA592 LTD, trading as Masheev engages to process Customer Data on behalf of our customers in connection with the provision of the Services. This list is maintained in accordance with our Data Processing Addendum (DPA) and Privacy Policy.
We will provide at least thirty (30) days' prior written notice before adding or replacing a sub-processor. The notice will be sent to the email address associated with the Customer's account. Questions or objections may be sent to privacy@masheev.com.
Sub-Processors and Transfer Safeguards
These providers process only the data needed for the feature the customer uses. Retention is governed by the applicable provider terms, DPA, product, and Masheev configuration; this page does not promise zero retention. Masheev does not use Customer Data to train its own models and does not authorize providers to use Customer Data for model training where provider contracts or settings offer that control.
The last column shows the safeguard Masheev relies on for transfers from the UK. "Verify" means we have not yet confirmed the provider's current certification on the official Data Privacy Framework list; until we have, we rely on the UK Addendum in the provider's data processing terms.
| Sub-Processor | Purpose | Data Location | Transfer safeguard (from the UK) |
|---|---|---|---|
| Cloudflare, Inc. | Workers hosting, CDN and DDoS protection, R2 file storage, Durable Objects, queues, workflows, inbound email routing and outbound email sending, Workers AI (embeddings, reranking, classification), Browser Rendering (web page extraction), Vectorize (single global knowledge index), Turnstile (bot checks) | Global edge; regional R2 per organization region; global queues, workflows and knowledge index | UK Extension to the EU-U.S. DPF (verify); UK Addendum in Cloudflare DPA as fallback |
| PlanetScale, Inc. | Managed PostgreSQL database and backups | EU (Frankfurt) and US (Northern Virginia), per organization region | UK Extension to the EU-U.S. DPF (certification checked 24 September 2026) |
| Functional Software, Inc. (Sentry) | Error and performance monitoring, configured to exclude message content | United States | UK Extension (verify); UK Addendum fallback |
| Railway Corp. | Hosting for the self-managed billing service | United States | UK Extension (certification checked 24 September 2026) |
| Anthropic, PBC | AI responses, summaries, classification | United States | UK Addendum to the SCCs (Anthropic DPA) |
| OpenAI, L.L.C. | AI responses and text generation; text-to-speech | United States | UK Addendum to the SCCs (OpenAI DPA) |
| Google LLC (Gemini API) | AI responses, only where Masheev has approved the use | United States / Global | UK Extension (verify) |
| ElevenLabs, Inc. | Voice AI processing for calls, including speech-to-text, text-to-speech, conversation handling and optional voice cloning. Call transcripts, and call audio where the customer enables call audio retention, are kept by ElevenLabs for up to 30 days | United States | UK Extension (verify); UK Addendum in ElevenLabs DPA as fallback |
| Twilio Inc. | Phone numbers, SMS, voice call connection and delivery status | United States / Global | UK Extension (verify); UK Addendum fallback |
| Jina AI GmbH | Fetching and extracting web pages for knowledge ingestion and when an AI agent looks up a web page | EU / provider infrastructure | EU adequacy (UK regulations recognise the EEA) |
| TablePort Ltd. | Customer-enabled reservation workflows | United Kingdom | Not a restricted transfer |
| Resend, Inc. | Legacy email delivery records only; no new sending | United States | UK Addendum or UK Extension (verify) |
| Treg (new; pending DPA) | Business data enrichment during workspace setup: looks up public business information (company profile, map listing, disposable-domain check) through its data providers. Receives the business domain and, for the map listing, the business's public name and city or country; never email addresses or users' names | To be confirmed | To be confirmed (pending DPA) |
Services you connect. Channel and integration providers process data only when the corresponding channel or integration is enabled. When you connect your own Google, Microsoft, Meta (WhatsApp, Instagram) or Apple account, we exchange data with that provider on your instructions. For WhatsApp Business messaging Meta acts as our processor or yours under Meta's business terms; for Instagram, Google and Microsoft accounts, the provider also processes data under its own terms with you as its customer. These providers are listed here so you know where data goes.
AI providers and their usage policies. Customers must follow the usage policies of the AI providers above (Acceptable Use Policy Section 5.4):
| AI provider | What it does in Masheev | Usage policy |
|---|---|---|
| Anthropic, PBC | AI responses, summaries, classification | Anthropic Usage Policy |
| OpenAI, L.L.C. | AI responses, text generation, text-to-speech | OpenAI Usage Policies |
| Google LLC | Gemini AI responses, only where Masheev has approved the use | Generative AI Prohibited Use Policy |
| ElevenLabs, Inc. | Voice agents, speech-to-text, text-to-speech | ElevenLabs Prohibited Use Policy. Callers must be told they are speaking with AI and that calls are recorded and may be shared with ElevenLabs and its AI model providers. |
Not currently in use: Perplexity AI and Expo push notifications are not in use. We will give 30 days' notice before using them.
Treg is used only for Masheev's own workspace setup checks, where Masheev is the controller; it does not receive Customer Data you upload or End-User communications. It is listed here for transparency.
Masheev may also retrieve public company information from Companies House. Companies House is a public data source, not a Masheev sub-processor.
Billing and Payment Sub-Processors
| Sub-Processor | Purpose | Data Location | Transfer safeguard (from the UK) |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, and invoice management | United States | UK Extension (verify) |
The billing engine is self-hosted Lago software on Railway. Merely supplying that software does not give Lago Labs access to Customer Data; Railway is listed as its hosting processor. Any separately authorized vendor support access must be assessed and disclosed before use.
Changes to This List
We will update this page when sub-processors are added, removed, or replaced. Material changes will be communicated to customers via email notification at least thirty (30) days before the new sub-processor begins processing Customer Data.
If you have questions or objections regarding a sub-processor change, please contact us at privacy@masheev.com within thirty (30) days of receiving the notification. We will work in good faith to address reasonable objections, including by offering an alternative sub-processor or allowing you to terminate the affected services without penalty if no reasonable alternative is available.