Data Subprocessors

Last updated: September 25, 2024

Merge subprocessors are third-party entities autorized to process data to support Merge services in accordance with our service agreements. Merge requires the satisfaction of contractual obligations from each subprocessor to ensure the enforcement of security controls and compliance with applicable data protection regulations.

AWS - Amazon Aurora

Function

  • Amazon Aurora is a MySQL and PostgreSQL-compatible relational database built for the cloud, that combines the performance and availability of traditional enterprise databases with the simplicity and cost-effectiveness of open-source databases.

Location

  • North Virginia, Stockholm, or customer-chosen AWS single-tenant region, at customer's election

AWS - Amazon CloudWatch

Function

  • Amazon CloudWatch collects monitoring and operational data in the form of logs, metrics, and events. CloudWatch is configured to detect anomalous behavior in the environments and generate alerts for further investigation.

Location

  • North Virginia, Stockholm, or customer-chosen AWS single-tenant region, at customer's election

AWS - Elastic Compute Cloud (EC2)

Function

  • Amazon EC2 is a highly scalable, fast, container management service that makes it easy to run, stop, and manage Docker containers on a cluster.

Location

  • North Virginia, Stockholm, or customer-chosen AWS single-tenant region, at customer's election

AWS - GuardDuty

Function

  • Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect AWS accounts.

Location

  • North Virginia, Stockholm, or customer-chosen AWS single-tenant region, at customer's election

AWS - Simple Storage Service (S3)

Function

  • Amazon S3 is virtual storage used in conjunction with Amazon EC2 to store object data. Amazon S3 is also used to automatically replicate data across AWS regions.

Location

  • North Virginia, Stockholm, or customer-chosen AWS single-tenant region, at customer's election

Looker - A Google Company

Function

  • Enables the viewing of Customer Data including personal data via the Service. This is restricted internally via hard access controls and policies, and a limited subset of Merge employees is only able and permitted to access this data in response to support requests.

Location

  • Google Cloud Platform - US West

Logz.io

Function

  • Logz.io is a logging and observability platform used by Merge for ingesting, parsing, querying, and performing analytics related to security infrastructure logs and metrics. Customer and End Customer Data limited to IP addresses and user IDs may be processed incidental to the purposes of log collection.

Location

  • United States, Germany

Sentry

Function

  • Sentry is an error monitoring and remediation platform used to better understand and resolve issues encountered in our products. Incidental to the purpose of the error monitoring, Customer and End User data may be processed by Sentry. Example data includes Customer and End User IP addresses, linked account IDs, user names, email addresses, and other types of data processed by Merge.

Location

  • United States, Germany