Companies that process data for Mixel
Last updated: 13 November 2026
These companies process personal data for us, under contract, only to run Mixel. Each one has its own sub-processors, listed on the page we link. We’ll update this page, and tell account holders by email, before we add a company that receives personal data. See our privacy policy for the whole picture.
| Company | What it does for us | Data it handles | Where | Safeguard if outside the EU |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL (Luxembourg) | Hosts the cloud, its database and logs; sends account email (Amazon SES) | Everything the cloud holds about your account; feedback you send; request logs with shortened IP addresses; the emails we send you | Milan, Italy (eu-south-1) | Data stays in the EU. The AWS data processing addendum includes Standard Contractual Clauses for any access from elsewhere. Sub-processors |
| Cloudflare, Inc. (USA) | Our website, DNS and the network in front of the cloud; email routing to our mailbox; model downloads; encrypted copies of the cloud database | IP addresses and requests passing through; emails you send us; encrypted database copies | Global network; stored data in the EU (R2, EU jurisdiction) | EU-US Data Privacy Framework; Standard Contractual Clauses as a fallback. Sub-processors |
| WorkOS, Inc. (USA) | Sign-in (AuthKit): accounts, passwords, passkeys, authenticator apps, social sign-in, bot protection, sign-in emails | Email address, sign-in methods, IP address and browser details at sign-in | United States | Standard Contractual Clauses in the WorkOS data processing addendum. Sub-processors |
| PostHog, Inc. (USA; data in the EU) | Usage counts: opt-in usage sharing from the Mac app, cookieless page views on the cloud’s public pages, account event counts, and counts of feedback arriving (never its words). Switched on only while our data processing agreement is in place | Named events with fixed values, a random install id, a scrambled account id, or a random code made for one count; IP addresses are discarded on arrival | Frankfurt, Germany | Data hosted in the EU; Standard Contractual Clauses or the Data Privacy Framework for support access from elsewhere. Sub-processors |
| Anthropic, PBC (USA) | The AI service behind the agents that help the founder operate, secure and support Mixel | What the agents see while working: account data, request logs, feedback, support emails. Never backups. Anthropic may not train on it | United States | Standard Contractual Clauses in the Anthropic data processing addendum, part of its commercial terms. Sub-processors |
Not processors, but you should know: emails you send us arrive in the founder’s own mailbox, an ordinary account with a consumer email service, used under the provider’s own terms and privacy policy. GitHub serves app downloads, and Google, GitHub and Apple take part in sign-in if you choose them, each under its own privacy policy. An AI assistant you connect to Mixel, and store apps you allow to use the internet, are run by their own makers.