Last updated: 2026-05-07
The following sub-processors process personal data on behalf of MuseRelay (Muse Layer LLC as commercial operator and Screen Art S.L. as EU Representative and technology operator) under data processing agreements pursuant to Art. 28 GDPR. The list is also available in machine-readable form at /api/public/subprocessors.
| Sub-processor | Service | Location | Data category |
|---|---|---|---|
| Contabo GmbH | Server hosting: application, database, files and backups | Germany / EU | All data processed on the platform |
| Amazon Web Services EMEA SARL | AWS Bedrock Europe for Claude Haiku 4.5 and technical CloudWatch logging | Ireland / EU (eu-west-1) | Conversations, prompts, responses and technical metrics |
| Google LLC / Google Cloud (Vertex AI) | AI models (Gemini), multimodal processing | Belgium / EU | Conversations, attachments |
| IONOS SE / IONOS AI Model Hub | GPT-OSS 120B AI processing on IONOS European infrastructure | Germany / EU | Conversations, prompts, responses and technical metrics |
| Telnyx LLC | VoIP telephony / SIP | USA (SCC + supplementary measures) | Voice metadata |
| Deepgram, Inc. | Speech-to-text and text-to-speech | USA (SCC + supplementary measures) | Audio, transcripts |
| Sweego SAS | Transactional email | France (EU) | Email, name |
| Stripe Payments Europe Ltd. | Card payment processing (EEA) | Ireland (EU) | Billing, last 4 digits |
| Stripe, Inc. | Card payment processing (rest of world) | USA (SCC + DPF) | Billing, last 4 digits |
| Meta Platforms Ireland Ltd. | Social channels: WhatsApp Business, Instagram, Messenger | Ireland (EU) | Messages, profile |
| Screen Art S.L. | EU Representative (Art. 27 GDPR) and technology operator; database replica and backups at its premises in Mallorca | España (EU) | All (technical operation) |
| Muse Layer LLC | Commercial operator and Stripe billing controller | Estados Unidos | Billing, contracts |
Notification of changes
Any addition or replacement of a sub-processor will be notified to active customers with a reasonable advance notice (typically 30 days), allowing them to object pursuant to Art. 28.2 GDPR. The latest version is always published on this page.
Contact
Questions or objections to a sub-processor: privacy@muserelay.com.
Updated: 3 October, 2026