Last updated: 1 July 2026
To provide the mandera Service, we use the carefully selected service providers ("subprocessors") below. Each is bound by data-protection obligations and processes data only as needed to provide its part of the Service.
mandera's analytics is cookieless and does not process personal data of your website visitors, so no subprocessor receives visitor analytics data.
| Subprocessor | Purpose | Location | Processes Customer personal data (AI features)? |
|---|---|---|---|
| Hetzner Online GmbH | Hosting & infrastructure | Germany (EU) | Yes (infrastructure) |
| Mistral AI | AI model inference for the AI features | France (EU) | Yes |
| DataForSEO | SEO data (keywords, SERP, search metrics) | USA | No (SEO query data) |
| Stripe | Payment processing & invoicing | EU / USA | No (account billing data) |
| Resend | Transactional email (password reset, OTP, notifications) | EU (Ireland) | No (account email only) |
Where a provider is located or incorporated outside the EU/EEA (in particular DataForSEO, and at the corporate level Stripe and Resend), we rely on appropriate safeguards such as the EU Standard Contractual Clauses. Processing of personal data under the AI features (Mistral, Hetzner) takes place within the EU.
We may update this list as our Service evolves. For changes that affect the processing of Customer personal data under our DPA, we notify affected customers at least 14 days in advance and give them the opportunity to object on reasonable data-protection grounds.
Questions: info@mandera.ai