Sub-processors
Michi uses these third-party providers to operate the service. We publish this list publicly and update it whenever a provider is added, replaced, or removed. Material changes are announced by email to all billing contacts at least 30 days in advance.
Last updated: 2026-05-21 — 16 active sub-processors.
| Provider | Purpose | Data processed | Region | DPA |
|---|---|---|---|---|
| Supabase ↗ | Primary database, auth, file storage | All customer data — encrypted at rest | EU | View ↗ |
| Vercel ↗ | Application hosting, edge functions | Request metadata, no persistent customer data | EU | View ↗ |
| Stripe ↗ | Subscription billing & payments | Billing email, payment method, invoices | EU | View ↗ |
| Anthropic ↗ | Claude LLM for transcript and email extraction | Transient prompt text only — not retained, not used for training | US | View ↗ |
| Resend ↗ | Transactional email delivery | Recipient email, subject, body of system emails | EU | View ↗ |
| Sentry ↗ | Error monitoring & performance traces | Stack traces, user ID (no PII in error context) | EU | View ↗ |
| PostHog ↗ | Product analytics (cookieless by default) | Anonymous events; identified events only after consent | EU | View ↗ |
| Crisp ↗ | Customer support chat widget | Email, name, chat transcripts (only when user initiates) | EU | View ↗ |
| Google (Gmail API + Pub/Sub) ↗ | Gmail integration & push notifications | Customer-authorised mailbox messages (read-only) | Global | View ↗ |
| Microsoft (Graph + Outlook) ↗ | Microsoft 365 mail integration | Customer-authorised mailbox messages (read-only) | EU | View ↗ |
| Otter.ai ↗ | Meeting transcript ingestion (customer-initiated) | Meeting transcripts the customer chooses to forward | US | View ↗ |
| Fireflies.ai ↗ | Meeting transcript ingestion | Meeting transcripts the customer chooses to forward | US | View ↗ |
| Fathom ↗ | Meeting transcript ingestion | Meeting transcripts the customer chooses to forward | US | View ↗ |
| Read.ai ↗ | Meeting transcript ingestion | Meeting transcripts the customer chooses to forward | US | View ↗ |
| Granola ↗ | Meeting note ingestion via email forwarding | Meeting notes the customer chooses to forward | US | View ↗ |
| GitHub ↗ | Source code repository (not customer data) | No customer data — code only | US | View ↗ |
Change notification
When we add, replace, or remove a sub-processor, we email every organisation owner at least 30 days in advance. You can object to a change by writing to dpo@michiplatform.com. If we can't resolve the objection, you have the right to terminate your subscription and receive a pro-rata refund.
Data residency
All primary storage (Supabase) and email delivery (Resend) is in the EU. Some sub-processors are US-based — when EU customers use them, transfers rely on the EU-US Data Privacy Framework and the relevant Standard Contractual Clauses. See our DPA for details.