Sub-processors
Version 1.0 — 07/23/2026
This page lists the sub-processors authorized to process Customer Data and End Customer Data in the delivery of the Maestra Services, as referenced in Exhibit C (Information Security Policy) §8 and §10.3 of the Software as a Service Agreement, the Data Processing Agreement (Annex 1 (EU), as supplemented by Annex 2 (UK) where applicable), and the Shopify App Privacy Policy and Terms of Service.
Maestra operates through two contracting entities: Maestra.io LLC (Delaware, United States) for customers on the US Software as a Service Agreement, and Maestra B.V. (the Netherlands) for customers on the EU Software as a Service Agreement. Where personal data originating under the EU/UK agreements is transferred outside the EEA or the UK, the transfer is carried out under the safeguards set out in the Data Processing Agreement and described in Maestra's privacy policies, including, as applicable, adequacy decisions (such as the EU–US Data Privacy Framework) and Standard Contractual Clauses.
Hosting and infrastructure
| Provider | Location | Purpose |
|---|---|---|
| Amazon Web Services, Inc. | United States | Cloud hosting of the US production platform |
| Amazon Web Services EMEA SARL 1 | Luxembourg | Data-in-transit processing during the 2026 hosting transition |
| Leaseweb Deutschland GmbH 1 | Germany | Hosting of the EU production platform (existing Maestra B.V. customers) during the 2026 hosting transition |
| Leaseweb USA, Inc. 2 | United States | Dedicated-server hosting of the US production platform |
| Maestra.io LLC 3 | United States | Maestra affiliate — operation and management of the US production platform |
¹ Engaged during the 2026 hosting transition described in Exhibit C §8; hosting consolidates to the United States providers upon its completion.
² For Maestra B.V. customers whose agreements predate version 1.0 of this page, engagement is governed by the sub-processor provisions of the Data Processing Agreement (Annex 1 (EU)); customers contracting from version 1.0 onward authorize the listed providers at contracting.
³ Applies to customers contracting with Maestra B.V. only; for customers contracting with Maestra.io LLC, it is the contracting entity, not a sub-processor.
Service delivery
| Provider | Location | Purpose |
|---|---|---|
| Infobip Inc. | United States | SMS, MMS, and RCS message delivery |
| Mobile network operators | Various | Transmission of SMS messages to recipients |
| Google LLC (incl. Firebase Cloud Messaging) | United States | Web push delivery, Android mobile push delivery, authentication flows |
| Apple Inc. (Apple Push Notification service) | United States | iOS mobile push delivery |
| Huawei (Push Kit) | China | Huawei-device mobile push delivery |
| Viber Media S.à r.l. | Luxembourg | Viber message delivery |
| Albato Limited | EEA | Advertising-tool integrations (engaged only when the Ad Optimization module is activated) |
| OpenRouter, Inc. | United States | AI model access for AI-assistant features |
| Intercom, Inc. | United States | Product support |
| Slack Technologies, LLC | United States | Support communications |
| 37signals LLC | United States | Support and project coordination |
| Microsoft Corporation | United States | Customer reporting infrastructure |
Destinations you connect are not Maestra sub-processors. Where you configure the Services to send data to third parties — advertising platforms, webhook endpoints, third-party AI agents, or other integrations — those recipients act on your instructions under your own arrangements with them.
Corporate service providers that process Maestra's own business data (account, billing, and contact information — for example, accounting, CRM, and e-signature tools) are listed in the US Privacy Policy and the EU Personal Data Policy.
Updates to this list
Maestra updates this page when sub-processors are added, replaced, or removed. Each change increments the version number, and prior versions remain available at the archive link below. Customers whose agreements provide sub-processor notice or objection rights — including customers contracting with Maestra B.V. under the Data Processing Agreement (Annex 1 (EU)) — receive notice of changes in accordance with those agreements. For all other customers, the list as published from time to time applies in accordance with Exhibit C §12 of the applicable Software as a Service Agreement.
Prior versions: None
Questions: dpo@maestra.io