Subprocessors
Last updated: 3 April 2026
MeshX Software Ltd (“MeshX”) engages the following categories of subprocessor to provide the MeshX services. This list is maintained for transparency and partner due diligence (including marketplace API reviews). Vendor names and scopes reflect the MeshX codebase and typical production configuration as of the date above — confirm your live environment with your account team if needed.
For privacy rights and questions: privacy@meshx.uk. See also our Privacy policy and Security overview.
| Subprocessor | Purpose | Typical data categories | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Supabase, Inc. | Managed PostgreSQL, authentication, and real-time/database APIs for the MeshX application. | Account data, application data, OAuth tokens, service logs as configured. | Primarily United States (project region); confirm in your Supabase dashboard. | Data Processing Agreement / SCCs or UK IDTA as offered by Supabase. |
| Cloudflare, Inc. | Cloudflare R2 object storage for user files, design assets, and related blobs. | User uploads, generated images, and file metadata as stored by the service. | Global edge / object storage regions per Cloudflare configuration. | Cloudflare DPA and standard contractual mechanisms where applicable. |
| Stripe, Inc. & affiliates | Payment processing, billing, and Stripe Connect for Print Network payouts where enabled. | Payment metadata, customer/business billing records; card data handled by Stripe. | United States, EU, and other regions per Stripe processing. | Stripe Data Processing Agreement and applicable SCCs / UK Addendum. |
| Google LLC (Google AI / Gemini API) | Text generation features (for example listing ideas, titles, descriptions) via Generative Language API. | Prompts and context you submit in those features; not TikTok Shop order or buyer PII. | United States and other Google processing locations. | Google Cloud / AI terms and DPAs as applicable to the product used. |
| Anthropic, PBC | Optional AI features where Anthropic models are invoked (for example structured text generation). | Prompts and parameters sent to the API in those flows. | United States. | Anthropic commercial terms and data processing commitments. |
| OpenAI, LLC | Image generation (DALL·E) when you select that engine in MeshX Create. | Text prompts and generation parameters; returned image URLs or assets processed by MeshX. | United States and other OpenAI processing locations. | OpenAI enterprise / API terms and DPA where applicable. |
| Ideogram, Inc. | Image generation when you select Ideogram in MeshX Create. | Prompts and generation settings. | Per Ideogram infrastructure. | Ideogram API terms and privacy policy. |
| Leonardo Interactive Pty Ltd | Image generation when you select Leonardo in MeshX Create. | Prompts and generation settings. | Per Leonardo infrastructure. | Leonardo terms and DPA as offered. |
| Black Forest Labs Inc. | Image generation when you select Flux in MeshX Create. | Prompts and generation settings. | United States (e.g. api.us1.bfl.ai) unless otherwise configured. | BFL API terms and policies. |
| Stability AI Ltd / affiliates | Image generation when you select Stability in MeshX Create. | Prompts and image generation requests. | Per Stability AI processing. | Stability API terms and DPA as offered. |
| Recraft, Inc. | Image generation when you select Recraft in MeshX Create. | Prompts and generation parameters. | Per Recraft infrastructure. | Recraft API terms and policies. |
| Application hosting provider(s) | Hosting and execution of the MeshX web application and API routes. | All data processed by the application in memory or temporary storage during requests. | Depends on production deployment (request current regions from MeshX). | Provider DPA / SCCs or UK IDTA as applicable. |
We may add or replace subprocessors where necessary to operate the services. Where required by law or contract, we will notify customers of material changes. Canonical URL: https://meshx.uk/subprocessors