TagadaPay LLC
Sub-processors
The third parties that process personal data on behalf of TagadaPay, under section 13.4 of the Terms of Service for Merchants.
Payment processing providers act under their own terms for the payment data they process and are not listed here.
- Version
- ecff0e45f43d
- Last updated
- 2 November 2026
| Sub-processor | Legal entity | Purpose | Personal data | Location | Vendor terms |
|---|---|---|---|---|---|
| Sumsub | Sumsub Inc. (US) | KYC and KYB identity verification, document review | Merchant principals (ID, selfie, documents) | EU (Germany) | Vendor terms |
| Basis Theory | Basis Theory (entity named in the Master Services Agreement) | Card tokenisation and vault (PCI) | Cardholders (card numbers) | US, Ireland, Germany (AWS) | Vendor terms |
| 3dsecure.io | 3dsecure.io ApS (DK) | 3-D Secure authentication | Cardholders | EU (Ireland) | Vendor terms |
| Firma | 1600 Holdings LLC, trading as Firma (firma.dev) | Electronic signature of merchant agreements | Merchant signatories (name, email, IP address, signature evidence) | EU (Paris, France; content delivery from Stockholm, Sweden) | Vendor terms |
| SignNow | airSlate, Inc. (US), or the entity named in the subscription terms | Electronic signature of acquirer merchant applications | Merchant principals (identity, signature) | As set in the vendor's data processing terms | Vendor terms |
| Clerk | Clerk, Inc. (US) | Authentication and user management | Merchant staff | Primarily Google Cloud and Cloudflare data centers, as stated in the vendor's DPA | Vendor terms |
| Resend | Plus Five Five, Inc., operating Resend (US) | Transactional email (merchant notifications, contract emails) | Merchant staff email addresses; cardholder email addresses (delivery verification emails) | US | Vendor terms |
| Slack | The Slack entity named in the contract (Slack Technologies, US, for US customers) | Merchant Slack Connect channels, internal operations alerts | Merchant staff names and messages | US by default | Vendor terms |
| Gleap | Gleap GmbH (AT) | Support widget, help centre, feedback | Merchant staff | EU (Germany) or US, as chosen for the account | Vendor terms |
| Chargeflow | Chargeflow Inc. (US) | Chargeback alerts and dispute management | Cardholders (last 4 digits of the card, amounts, order details) | As set in the vendor's terms | Vendor terms |
| Disputifier | Disputifier, Inc. (US) | Chargeback alert ingestion (Ethoca, RDR, CDRN) | Cardholders (alert data) | United States and other countries | |
| MD Integrations | M & D Integrations, Inc., DBA MD Integrations (US) | Telehealth prescriber network | Patients (prescription flow, health information under HIPAA) | Operated from the United States | Vendor terms |
| Vercel | Vercel, Inc. (US) | Hosting and file storage (documents, contracts, PDFs) | All of the above, at rest | US (primary processing); backups may be replicated globally | Vendor terms |
| Neon | Databricks, Inc. (US), with Neon, LLC (US) | Primary database (Postgres) | All of the above, at rest | US (East Coast and West Coast) (region configured for the account) | Vendor terms |
| ClickHouse Cloud | ClickHouse (entity named in the order form) | Analytics warehouse (transactions, disputes, fees) | Cardholders (pseudonymised), merchants | US-east-1 (region selected for the account) | Vendor terms |
| Upstash | Upstash, Inc. (US) | Queues and cache (Redis, QStash) | Transient data | As set in the vendor's data processing terms | Vendor terms |
| Inngest | Inngest, Inc. (US) | Background job orchestration | Identifiers and event payloads, in transit | As set in the vendor's terms | Vendor terms |
| Axiom | Axiom, Inc. (US) | Logs and observability | Identifiers and email addresses in logs | US or EU, stored in the region the data is sent to | Vendor terms |
| PostHog | PostHog, Inc. (US) | Product analytics (dashboard usage) | Merchant staff behaviour | As set in the vendor's data processing terms | Vendor terms |
| Anthropic | Anthropic, PBC (US) | AI: call analysis, document and site classification, risk summaries | Merchant documents and site content; samples of refused payments (cardholder name, email address and IP address, the first digits and last four digits of the card, the payment provider's card fingerprint, card and billing country) | As set in the vendor's data processing terms | Vendor terms |
| OpenAI | OpenAI OpCo, LLC (US) | AI: classification and assistants | Site content, merchant text | As set in the vendor's data processing terms | Vendor terms |
| Google Cloud | Google LLC (US) | Gemini (call matching), Maps and Places (address autocomplete), OAuth sign-in | Merchant addresses, staff sign-in | Any country where the vendor has facilities, subject to its location commitments (vendor's DPA) | Vendor terms |
| Cometly | Comet LLC, doing business as Cometly (US) | Attribution of applications to marketing campaigns | Applicants (email, application steps including refusal reasons, declared volumes and fees) | As set in the vendor's data processing terms | Vendor terms |