The current list of third-party services Minloq uses to deliver the platform · Maintained under clause 5.2 of the Data Processing Agreement · Last updated: 5 August 2026
A sub-processor is a third-party service Minloq uses to deliver the platform — for example, the database our systems run on, or the provider that delivers our emails. This page is the canonical, current list. Schedule A of the Data Processing Agreement renders this list; when the two are read together, this page — with its change history below — is the living record.
Changes to this list are governed by clause 5.2 of the DPA:
"Minloq will give the Customer reasonable advance notice of the addition or replacement of a sub-processor and a reasonable period to object."
When a sub-processor is added, every active account is notified by email before it takes effect for that account. An addition is never applied to an account retroactively.
These process the Customer's client / financial data:
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Amazon Web Services | AI extraction (Bedrock), OCR (Textract) | Singapore (ap-southeast-1) |
| Supabase | Database and file storage | Singapore region |
| Vercel | Application hosting and serverless API routes | Serverless functions: Singapore (sin1); static assets served via global edge network |
| Meta Platforms | WhatsApp Cloud API — messaging intake | Outside Singapore |
| Telegram Messenger Inc. † | Telegram Bot API — document intake: photos and files you send to your connected group | Outside Singapore |
| Resend | Transactional email | Outside Singapore |
| Stripe | Subscription billing (billing/contact data only, not the Customer's books) | Outside Singapore |
| Twilio | SMS one-time-passcode verification only (not WhatsApp) | Outside Singapore |
| Upstash | Rate-limiting metadata (tenant identifier / IP address); no document or financial content | Outside Singapore |
† Added August 2026 under clause 5.2. Telegram intake is a per-account feature and is off by default. For each account it becomes active only on the earlier of (a) the account's express consent, or (b) the end of the notice period stated in that account's notice email, with no objection received. Until then, Telegram processes no data for that account.
Processes prospect data at minloq.sg, not the Customer's books:
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Formspree | Contact and signup form submissions | Outside Singapore |
Reply to your notice email, or write to hello@minloq.sg — a person reads every reply. If you object within your notice period, the change does not take effect for your account and we will contact you to discuss options. If you reply AGREE, the change takes effect for your account immediately.