Companies / merge.dev
merge.dev subprocessors
merge.dev declares 15 subprocessors, including AI providers Anthropic, OpenAI.
Declared subprocessors
Subprocessor list From the company's own list. Read the source.
| Subprocessor | Purpose |
|---|---|
| AWS - Amazon Aurora | Amazon Aurora is a MySQL and PostgreSQL-compatible relational database built for the cloud, that combines the performance and availability of traditional enterprise databases with the simplicity and cost-effectiveness of open-source databases. |
| AWS - Amazon CloudWatch | Amazon CloudWatch collects monitoring and operational data in the form of logs, metrics, and events. CloudWatch is configured to detect anomalous behavior in the environments and generate alerts for further investigation. |
| AWS - Bedrock | Amazon Bedrock hosts foundational models via API within Merge's AWS environment |
| AWS - Elastic Compute Cloud (EC2) | Amazon EC2 is a highly scalable, fast, container management service that makes it easy to run, stop, and manage Docker containers on a cluster. |
| AWS - GuardDuty | Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect AWS accounts. |
| AWS - Simple Storage Service (S3) | Amazon S3 is virtual storage used in conjunction with Amazon EC2 to store object data. Amazon S3 is also used to automatically replicate data across AWS regions. |
| Anthropic provides large language models that Merge uses to enhance various services it provides to customers. | |
| Web security, DDoS protection, and content delivery (CDN). | |
| Looker - A Google Company | Enables the viewing of Customer Data including personal data via the Service. This is restricted internally via hard access controls and policies, and a limited subset of Merge employees is only able and permitted to access this data in response to support requests. |
| OpenAI provides large language models that Merge uses to enhance various services it provides to customers. | |
| PostHog provides a hosted solution for analyzing and improving the services Merge provides to its customers. | |
| Pylon is a hosted service that enables its customers to track support issues across various other platforms, such as email, messaging, and in-app forms. | |
| Sentry is an error monitoring and remediation platform used to better understand and resolve issues encountered in our products. Incidental to the purpose of the error monitoring, Customer and End User data may be processed by Sentry. Example data includes Customer and End User IP addresses, linked account IDs, user names, email addresses, and other types of data processed by Merge. | |
| Slack ( Salesforce.com ) is a messaging platform Merge uses for internal collaboration as well as external communication with customers. | |
| Structify | Structify is an AI-powered tool that automates the collection and organization of data from various platforms into organized datasets for analytics and reporting purposes. |
Named in the privacy policy
Privacy policy Weaker evidence than a list. Read the source.
| Company | Role |
|---|---|
| Not stated |
Seen on its website or job board
Website This shows what the company runs, not what data it shares.
| Technology | Signal we saw |
|---|---|
job board: merge.bamboohr.com/careers | |
header: cf-ray: a5474a3d0f3e77e6-DFW | |
script: j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl; f.parentNode.insertBefore( | |
mx: aspmx.l.google.com. | |
script: https://js.hs-scripts.com/20608300.js | |
script: https://cdn.prod.website-files.com/624b192df0b0151225c10026/6a1845cfa5f68864d961799c_arrow_white.pn |
Certifications
| Standard | Status | What this means |
|---|---|---|
| HIPAA | Company's own statement | There is no official HIPAA certification or registry. This is the company's own statement of compliance. |
| ISO 27001 | Company's own statement | Stated by the company. We have not checked an accreditation registry. |
| SOC 2 | Company's own statement | SOC 2 has no public registry, so this cannot be verified from public data. |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. How we collect data.