MR SURICATE engage trusted third-party service providers (“sub-processors” or subprocessors) to enable the provision, operation, and improvement of its SaaS platform.
These service providers may be required to process certain data to the extent strictly necessary for the performance of the services provided by MR SURICATE.
MR SURICATE that each of these service providers provides sufficient safeguards regarding security, confidentiality, and data protection, in accordance with the requirements of the General Data Protection Regulation (GDPR) and applicable contractual obligations.
| Subprocessor | Service Provided | Category | Treatment Location | Data Categories |
| Google Cloud Platform | Cloud Infrastructure and Platform Hosting | Infrastructure | European Union: europe-west9 (France) for production and data, europe-west1 (Belgium) for some of the execution engines, europe-west4 (Netherlands) for backups | Application data, technical logs, customer data |
| OVH | DNS Services | Infrastructure | European Union (France) | Technical DNS Data |
| Oxylabs | Geolocation-Based Proxy Infrastructure | Infrastructure | European Union (Lithuania). The search results are displayed based on the geolocation specified by the test | Query Metadata |
| BrowserStack | Browser and Mobile Testing Infrastructure | Testing Tools | Within the European Union or outside the EU, depending on the configuration chosen | Technical test data, data redacted |
| LambdaTest | Browser and Mobile Testing Infrastructure | Testing Tools | United States | Technical test data, data redacted |
| Anthropic | Language models used by AI-powered assistance features | Artificial Intelligence | United States | Content strictly necessary for the requested functionality |
| Mailjet | Sending transactional emails | Communications | European Union | Email address, sending metadata |
| MessageBird | Sending Text Messages | Communications | European Union; international shipping available depending on the destination | Phone number |
| HubSpot | CRM and Marketing Tools | Customer Management | The European Union and the United States | Customer and Prospect Data |
AI-powered features are governed by our AI Governance Statement and our internal AI Policy. Customer data is not used to train public or third-party AI models without explicit contractual consent.
The core of the platform is hosted in the European Union. Application data and customer data at rest do not leave the European Union.
MR SURICATE acts as a subcontractor for its clients. Transfers to its subsequent subcontractors are therefore governed by Module 3 of the standard contractual clauses adopted by Implementing Decision (EU) 2021/914, which pertains to transfers from a subcontractor to a subsequent subcontractor.
| Subprocessor | Country of Treatment | Transfer mechanism |
| Anthropic | United States | Standard Contractual Clauses |
| HubSpot | United States | EU-US Data Privacy Framework, supplemented by standard contractual clauses |
| BrowserStack | United States and India, depending on the enabled region | Standard Contractual Clauses |
| LambdaTest | United States | Standard Contractual Clauses |
| MessageBird | Outside the EEA, depending on the destination country of the text message | Standard Contractual Clauses |
The data transferred is limited to what is strictly necessary for the functionality in question. Test environments are configured to limit the exposure of actual personal data whenever possible. Upon request, test execution can be restricted to infrastructure located within the European Union.
MR SURICATE internal procedures for selecting and evaluating subcontractors.
These procedures notably include:
Subcontractors are only engaged when essential for the operation or enhancement of services.
This list may be updated to reflect changes in the technical infrastructure or service providers utilized.
Clients will be informed of any significant modification to this list when required by applicable data protection regulations.
In accordance with the data processing agreement, customers are notified of any addition or replacement of a data processor that may affect the processing of their data, prior to its implementation whenever possible, and have the time period specified in the contract to file a reasoned objection.
For any inquiries regarding subcontractors or data protection:
Email: dpo@mrsuricate.com