Sub-processors
Last updated 17 July 2026
The companies that process personal data on behalf of Manta, what each one does, and what it receives. This is the same list shown in our Privacy Policy, published here on its own so it is easy to find, link to, and keep current.
1. What a sub-processor is
A sub-processor is a company we use to help run Manta - for hosting, email delivery, abuse protection, sign-in, or analytics. They process personal data only on our instructions, under contract, and only for the purpose shown against each one.
2. The providers we use
This list is current:
| Provider | What they do | Data they receive | Location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Hosting, database, file storage, email delivery, and AI-assisted suggestions - the platform the whole service runs on. | Effectively all of it: account and profile data, your trip content and documents, email addresses, and technical/log data such as IP address. | United States | Standard contractual clauses |
| Cloudflare | Image storage and delivery (avatars and trip covers), and bot/abuse protection on sign-up. | Profile and trip images you upload, and your IP address when images load or a check runs. | United States | Standard contractual clauses |
| Sign-in with Google, maps, place search, and web fonts. | For sign-in: your email address, name, and profile picture. For maps and fonts: your IP address. For place search: the location terms you type. | United States | Standard contractual clauses | |
| Mixpanel | Product analytics - understanding how the product is used so we can improve it. | Product-usage events and an anonymous analytics identifier. Never your name or email address. Only shared if you have not declined analytics. | United States | Standard contractual clauses |
| Pexels | Suggesting stock photos for trip covers and wishlist items. | The search terms we derive from your trip (such as its destination) - never your identity. | United States | Standard contractual clauses |
3. International transfers
Manta operates from Singapore, and several of these providers process data in the United States. Where personal data is transferred outside your region, we rely on appropriate safeguards - principally the European Commission's standard contractual clauses (and their UK equivalent). The location and safeguard for each provider are shown in the table above.
4. How we keep this list current
We update this list in the same change that adds a provider, so it stays current rather than being a periodic snapshot. Replacing a provider with another that does the same kind of work (for example, a different hosting or email provider) is not a material change. If we ever process your personal data for a genuinely new purpose, or share it with a new kind of recipient not described here, that is a material change and we will tell you.
5. Questions or objections
To ask about a provider on this list, or to raise an objection, contact us at support@wemanta.com. For the full picture of what we collect and why, see our Privacy Policy.