Last updated: October 21, 2026
Mucho Gusto uses the third parties below to run the service. Each processes customer data only to provide its function, and none may use it for its own purposes. This list is referenced by our Terms and by our Data Processing Addendum, which customers can request from our security page.
| Subprocessor | Purpose | Data handled | Location |
|---|---|---|---|
| Neon Neon, Inc. | Primary database hosting (Postgres) | All customer data: profiles, org data, transcripts, comments, engagement, audit log | Frankfurt, Germany (EU) |
| Render Render Services, Inc. | Application hosting (backend API and web app) | All customer data in transit | Ohio, USA |
| Redis Cloud Redis Ltd. | Cache, rate limiting, background job queue | Transient identifiers and cached feed and status data | N. Virginia, USA |
| Mux Mux, Inc. | Video upload, storage, transcoding, captions and playback | Video, audio and transcripts | USA; global CDN delivery |
| Clerk Clerk, Inc. | Authentication and identity | Name, email, sign-in and session data | USA |
| Anthropic Anthropic, PBC | Video summaries and topics, language detection, profile-writing assistance, assistant features | Transcript and bio text | USA |
| Voyage AI Voyage AI, Inc. | Text embeddings for recommendations and matching | Transcript and bio text | USA |
| Stripe Stripe, Inc. | Billing and payment processing (card-paid plans) | Billing contact and payment details (card data goes to Stripe directly) | USA |
| Apple Apple Inc. | Push notifications (APNs) for iOS | Device tokens, notification text | USA |
| Resend Resend, Inc. | Transactional email (invitations and notices) | Recipient name and email address | USA |
| Cloudflare Cloudflare, Inc. | Bot protection (Turnstile) on the anonymous demo page only | Visitor IP address | Global |
| PostHog PostHog, Inc. | Product analytics: explicit events only (no session replay, no autocapture), including the marketing-site homepage experiment | Pseudonymous identifier and event properties; visitor IP address | USA |
These are connected by your organization's own admins, with permissions they grant and can revoke at any time. The provider of the connected system acts for your organization, not as our subprocessor.
We give customers at least 30 days' notice before a new or replacement subprocessor begins processing customer data, by posting the change here and by email to customers who have asked to be notified. To be notified, or to object to a change on data protection grounds, email [email protected].
See also: Privacy Policy, Terms, Security.