Sub-processor List
MEFERI enters into agreements with each sub-processor that impose data protection obligations at least equivalent to those set out in Our DPA with Our Customers. We conduct due diligence on Our sub-processors to ensure the protection of Personal Data.
This list may be updated from time to time. We will notify Our Customers of any intended changes concerning the addition or replacement of sub-processors in accordance with the terms of Our DPA.
Our full DPA is available here .
Sub-processors are third parties authorized by MEFERI to process Personal Data provided by MEFERI’s Customers to deliver MEFERI’s Services.
Sub-processor Entity NameService CategoryPurpose of Processing / Services Provided to MEFERICountry/Region of Data Processing (Primary Location)Link to Sub-processor’s Data Protection Documentation
| Sub-processor Entity Name | Service Category | Purpose of Processing / Services Provided to MEFERI | Country/Region of Data Processing (Primary Location) | Link to Sub-processor’s Data Protection Documentation |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud Infrastructure Provider | Provision of underlying cloud computing infrastructure (including servers, storage, networking, databases) for hosting MEFERI’s core Services provided to Customers (such as MEFERI Shadowalk MDM/EMM Cloud Solution and cloud-hosted components of the CIAO Intelligent Shopper Assistant (ISA)) and MEFERI’s partner portal (portal.meferi.com). | European Economic Area (EEA) – France (AWS region eu-west-3) | AWS Data Processing Addendum , AWS GDPR Compliance Center |
| Zoho Corporation B.V. | Support and Customer Service Tools | Provision of a cloud-based customer support ticketing system and helpdesk platform (Zoho Desk), accessible at helpdesk.meferi.com, to manage support requests related to the Services. | European Union (EU) | Zoho GDPR Commitment Zoho Data Processing Addendum |
| Twilio Inc. | Communication Service Providers | For sending SMS notifications (e.g., critical alerts, two-factor authentication codes) to Customer’s authorized users in connection with the Services. | USA | Twilio Data Protection Addendum |
| Functional Software, Inc. (d.b.a. Sentry) | Analytics and Service Performance Monitoring | For real-time error tracking and performance monitoring within MEFERI’s cloud-based Services to identify and resolve technical issues. | USA | Sentry Data Processing Addendum |
MEFERI’s Own Websites and Portals (meferi.com, portal.meferi.com, helpdesk.meferi.com, etc.)
MEFERI operates various websites and portals to engage with prospects, customers, and partners. It is important to distinguish between MEFERI’s role as a Data Controller for its own websites and as a Data Processor for the Services provided to Customers.
- When MEFERI is a Data Controller: When you provide Personal Data directly to MEFERI through our corporate and marketing websites (e.g., by filling out a contact form on meferi.com), MEFERI acts as the Data Controller. The processing of this data is governed by MEFERI’s Privacy Policy. The infrastructure for these websites is provided by Kinsta Inc.
- When MEFERI is a Data Processor: When you provide Personal Data through portals that are part of the Services delivered to our Customers, MEFERI acts as a Data Processor on behalf of the Customer. The infrastructure for the partner portal (portal.meferi.com) is provided by Amazon Web Services (AWS), and the platform for the customer support portal (helpdesk.meferi.com) is provided by Zoho Corporation B.V. Both AWS and Zoho are listed as sub-processors in the table above because they process data for which our Customers are the Controllers.
MEFERI’s hardware and Services may be used in conjunction with software or services provided by third parties (“Third-Party Partner Solutions”), such as payment solutions, retail self-scanning software, or specialized MDM/EMM platforms, where the Customer may have a direct contractual relationship with such third-party providers.
In these cases, the third-party provider typically acts as a Data Controller or a Data Processor for the Personal Data they handle in connection with their services, as determined by the Customer’s agreement with that third party. These Third-Party Partner Solutions are not sub-processors of MEFERI as defined in Our DPA, and MEFERI is not responsible for the data processing activities of these third parties, unless such a provider is also explicitly listed as a sub-processor to MEFERI in the table above for a different purpose.
For information about Third-Party Partner Solutions that can be integrated with MEFERI’s products but where the Customer enters into a direct relationship with the provider, please refer to our product descriptions, such as the OmniIndustry Apps Suite , or contact us for more details.