Subprocessors
Last updated: 21 June 2026
Mule-it Ltd engages the following third-party providers ("subprocessors") to assist in operating the platform. Each subprocessor is bound by a Data Processing Agreement ("DPA") that requires them to handle personal data securely and in compliance with UK GDPR and, where applicable, EU GDPR.
Subprocessors process data only as instructed by Mule-it and are required to implement appropriate technical and organisational security measures. This list does not disclose proprietary architecture or internal configurations.
| Subprocessor | Purpose | Location | Transfer safeguard | Website |
|---|---|---|---|---|
| Supabase Inc. | Database hosting, authentication, and file storage | United States / European Union | EU Standard Contractual Clauses, SOC 2 Type II, EU data centres available | Visit → |
| Twilio Inc. | SMS notifications — delivery handover codes and job alerts | United States / European Union | EU Standard Contractual Clauses, SOC 2 Type II, ISO 27001 | Visit → |
| Vercel Inc. | Web application hosting and edge content delivery | United States / European Union | EU Standard Contractual Clauses, SOC 2 Type II, EU edge nodes available | Visit → |
| Mapbox Inc. | Interactive mapping, route visualisation, and geocoding | United States | EU Standard Contractual Clauses, data processing agreement | Visit → |
| Sentry (Functional Software, Inc.) | Application error and performance monitoring | United States / European Union | EU Standard Contractual Clauses, EU data region available, SOC 2 Type II | Visit → |
| Resend, Inc. | Email delivery and marketing communications | United States | EU Standard Contractual Clauses, SOC 2 Type II, data processing agreement | Visit → |
| PostHog Inc. | Product analytics and usage insights | European Union | EU data region (EU Cloud), EU Standard Contractual Clauses | Visit → |
| Google LLC | Authentication, cloud infrastructure, and AI services | United States / European Union | EU Standard Contractual Clauses, EU data regions available, ISO 27001 / SOC 2 Type II | Visit → |
| Amazon Web Services, Inc. | Cloud infrastructure and object storage | United Kingdom / European Union | EU Standard Contractual Clauses, UK/EU data regions, ISO 27001 / SOC 2 Type II | Visit → |
Payment providers
Our payment providers are regulated financial institutions. Because they decide how to use payment data for their own legal and regulatory purposes (fraud prevention, identity and anti-money-laundering checks, and card-scheme rules), they act as independent data controllers — not sub-processors of Mule-it. The data they handle is governed by their own privacy policies.
Stripe, Inc.
Card payments, tokenisation, and payment escrow · United States / European Union
Wise Payments Ltd
Driver earnings payouts to UK bank accounts · United Kingdom
Data Transfer Mechanisms
For subprocessors located outside the United Kingdom, we ensure appropriate safeguards are in place:
UK Standard Contractual Clauses (UK SCCs) / EU SCCs
All subprocessors processing data outside the UK have signed the ICO-approved International Data Transfer Agreement (IDTA) or EU SCCs, ensuring UK/GDPR-compliant data transfers.
UK Adequacy Decisions
Where a sub-processor operates in a region covered by a UK adequacy decision (such as the EU/EEA), no additional transfer mechanism is required.
Industry Certifications
Subprocessors maintain relevant certifications including SOC 2 Type II, ISO 27001, and PCI DSS Level 1 (for payment processing).
Data Processing Agreements
Each subprocessor has executed a comprehensive DPA that outlines their obligations regarding data protection, security, and confidentiality.
Technical Safeguards
All data transfers are encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption.
Changes to This List
We may add, remove, or replace subprocessors from time to time. We will update the "Last updated" date at the top of this page when we do so. Where a change represents a material new category of processing, we will notify registered users by email at least 14 days in advance.
Contact
General enquiries
hello@mule-it.coPrivacy questions
privacy@mule-it.coData Protection Officer
dpo@mule-it.coMule-it Ltd
United Kingdom
Registered in England and Wales
Related documents