Mesh Sub-Processors
Last Updated: October 16, 2024
Third Party Sub-Processors
Mesh uses the third party companies below (each, a “sub-processor”) to process personal data (i) on behalf of Mesh customers; (ii) in accordance with customer instructions as communicated by Mesh; and (iii) in strict accordance with the terms of a written contract between Mesh and the sub-processor.
Mesh imposes obligations on its sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of personal data is protected to the standards required by applicable data protection laws. Further information relating to sub-processor security measures can be found via the external links below.
Where the engagement of a sub-processor requires the cross-border transfer of personal data, Mesh has performed Transfer Impact Assessments for such data transfer.
Mesh maintains an up-to-date list of the names and locations of all sub-processors below. Mesh customers may subscribe to notifications of sub-processor changes (if we want to do this... then dedicated Blog channel may be a better idea) to receive updates.
Duration of processing: For each sub-processor below, processing of personal data will be for the duration that the customer uses and continues to use the applicable service(s), and for the retention periods as set out in customer’s agreement with Mesh.
Sub-Processor | Applicable Services (s) | Subject Matter | Nature and purpose of processing | Location(s) of processing | External links for additional information relating to security |
Amazon Web Services | Storage, Compute, API, CDN, Identity, Security and Audit services. Ask your Mesh representative for details. | Mesh data and processes are fully hosted on AWS. | Cloud infrastructure. | USA | Additional Link |
BrightData | Proxy Networks | Personal and public data used in verification activity. | Proxy services necessary to access third part data sources. | USA | Additional Link |
Hotjar | Heatmaps | Personal data and session data derived from Mesh Services interactions. | Tracking and measuring user engagement with Mesh Services. | USA | Additional Link |
Medpro | WebID | Personal and medical license data. | Mesh uses Medpro WebID as a data source. | USA | Additional Link |
Smarty | US Address Autocomplete | Physical Addresses | Address autocomplete and rooftop geolocation. | USA | Additional Link |
Twilio | Programmable Messaging | Personal data contained in communications sent through Mesh Services. | Communications over Mesh’s messaging services. | USA | Additional Link |
Usersnap | Bug Tracking | Session data for debugging and quality assurance purposes. | Capturing and tracking user feedback and issues. | USA | Additional Link |
ZenRows | Web Scraping API | Scraping public web data for Mesh verification purposes. | Automated data extraction services. | USA | Additional Link |