Sub-processor List
Public-facing list of the third-party service providers (“sub-processors”) that Memini AI uses to provide the service and that may process personal data.
Controller: [[LEGAL_ENTITY_NAME]], [[REGISTERED_ADDRESS]] Last updated: 2026-06-16 Notice of changes: material changes to this list will be announced [[NOTICE_CHANNEL]] at least [[NOTICE_DAYS]] days before a new sub-processor starts processing.
v1 active sub-processors
| Sub-processor | Purpose | Personal data shared | Location / jurisdiction | Transfer mechanism (for EU/UK) |
|---|---|---|---|---|
| OpenRouter | LLM gateway/router for chat, OCR, embeddings | Chat messages + memory context (only structured IDs masked), images for OCR, text for embeddings | US | DPF or SCCs + TIA |
| [[LLM_HOST]] (US-hosted model) | Chat-model inference (open-weight models, not China-hosted) | Same as OpenRouter | US (pinned via OpenRouter provider.only) | DPF or SCCs + TIA |
| OpenAI (via OpenRouter) | Text embeddings + batch Whisper STT (ingestion) | Memory text; uploaded audio | US | DPF or SCCs + TIA |
| Google — Gemini (via OpenRouter) | Image OCR | User-uploaded images (may contain arbitrary PII) | US | DPF or SCCs + TIA |
| Deepgram | Speech-to-text (live WebSocket + batch REST) | Raw user voice/audio | [[DEEPGRAM_REGION]] | DPF or SCCs + TIA |
| Cloudflare (R2 + reverse proxy) | Media object storage; CDN/proxy fronting the API | Uploaded audio/images; IP/traffic metadata | [[CLOUDFLARE_R2_REGION]] | DPF or SCCs + TIA |
| RevenueCat | Subscription entitlement source of truth | User UUID, transaction/product IDs, entitlement status (no card data) | US | DPF or SCCs + TIA |
| Google — Firebase Cloud Messaging | Push notifications | Device push tokens + notification payloads | US | DPF or SCCs + TIA |
| Brevo (Sendinblue) | Transactional email (verification, reset, security notices) | Email address + message body | EU (France) | EEA — no transfer |
| Railway | Application + PostgreSQL (memory/system/vault) + Redis hosting | All runtime data in transit + at rest | [[RAILWAY_REGION]] | depends on region |
| Apple / Google Sign-In | Identity (ID-token sign-in) | ID token → email/name | US | DPF or SCCs |
| SearXNG (self-hosted) | Web search during chat tool-calling; federates to upstream engines | Search queries derived from chat | self-hosted → upstream engines | n/a / per upstream |
Integration sub-processors (only if you connect them)
| Sub-processor | Purpose | Data | v1 status |
|---|---|---|---|
| Google (Calendar) | Import calendar events into memory | Event subject/location/attendees/times | Available (calendar-only scope) |
| Notion | Import Notion pages | Page titles + block content | Available (optional) |
| Google (Gmail) | Import email into memory | Email subjects/bodies | Not enabled |
| Microsoft (Outlook + Calendar) | Import Outlook mail/calendar | Mail.Read / Calendars.Read | Not enabled |
| Apple iCloud (IMAP + CalDAV) | Import iCloud mail/calendar | App-specific password + mail/calendar | Not enabled |
Note on imported data: when you connect an integration, Memini may process personal data about third parties (email senders, calendar attendees, Notion collaborators). For that data Memini acts as an independent controller under a documented legitimate-interest assessment.