To provide the Services, Mazza AI uses the trusted third-party providers ("sub-processors") below. Each is bound by data-protection terms no less protective than our Data Processing Agreement, and each only receives the data it needs for its role. We do not allow any sub-processor to use personal data for its own purposes, including AI model training or advertising.
Core Sub-processors
These providers are part of the platform for every client.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic | AI agent responses (Claude models) | Conversation text and context needed to generate a reply | United States |
| VAPI | Voice telephony, speech-to-text, text-to-speech | Call audio, transcripts, caller phone number | United States |
| Meta Platforms (WhatsApp) | Sending and receiving WhatsApp messages | Phone numbers, message content and media | United States & global |
| Supabase (on AWS) | Primary database and file storage | All platform data: contacts, conversations, recordings, transcripts, media, bookings | Singapore |
| Clerk | Authentication and account management | Account user name, email, login metadata | United States |
| Stripe | Payments and subscription billing | Billing contact, card token and last four digits (no full card number) | United States & global |
| Resend | Transactional email (invites, alerts, reports) | Recipient email, message content | United States |
| Vercel | Application and website hosting | Request metadata, IP address | United States & global |
Optional Integrations
These only receive data if a client chooses to connect them.
The following providers process personal data only when a client connects the relevant integration in the dashboard.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Google (Gmail / Calendar) | Email sending and calendar sync, if the client connects it | Email content, calendar events | United States & global |
| Microsoft (Outlook) | Email sending, if the client connects it | Email content | United States & global |
| Slack | Team notifications, if the client connects it | Notification content | United States |
Changes & Notice
We give clients reasonable notice before adding or replacing a sub-processor.
We keep this page current. When we add or replace a sub-processor that processes Client Personal Data, we provide reasonable prior notice as described in our DPA, and clients may raise a reasonable, data-protection-based objection. To request notifications of changes, or to ask a question about a provider, contact admin@mazzaai.com.