# legal
Subprocessors
The third parties mdreel engages to deliver the Service, each processing personal data in the EU under a data-processing agreement. This list is part of our GDPR Article 28 commitments.
Current subprocessors
The following subprocessors may process personal data contained in Customer Content or in account and billing data. Each is bound by a data-processing agreement with obligations equivalent to our own (Article 28(4) GDPR), and each processes within the European Economic Area.
| Subprocessor | Purpose | Location | Status |
|---|---|---|---|
| Google Cloud (Google Ireland Limited / Google Cloud EMEA) | Cloud infrastructure hosting the whole service: compute (Cloud Run), the application database (Cloud SQL), object storage for uploads and outputs (Cloud Storage), secret storage (Secret Manager) and AI video/audio analysis (Vertex AI, no training on customer data). | European Union — Cloud Run in europe-west1 (Belgium); Cloud SQL, Cloud Storage and Secret Manager in europe-central2 (Warsaw); Vertex AI pinned to europe-central2 / europe-west3 (Frankfurt). | Active |
| Stripe (Stripe Payments Europe, Ltd.) | Payment processing and subscription billing. Card details are entered on Stripe and never touch mdreel servers; mdreel stores only billing identifiers. | European Union (Stripe Payments Europe, Ltd., Ireland). | Integrated (test mode) — not yet processing live payments. |
| Brevo (Sendinblue SAS) | Transactional email (account and service notifications). | European Union (France). | Planned — no email is sent at this time. |
Analytics is first-party — not a subprocessor
Our website analytics uses Umami, which we self-host on our own EU infrastructure. Because we run it ourselves, cookieless, no analytics data is shared with a third-party provider — so Umami is deliberately not a subprocessor. There is no US analytics vendor, tracking pixel or session-replay tool anywhere on our properties. See the Privacy Policy for details.
Changes and your right to object
We will give at least 30 days' advance notice before a new subprocessor begins processing, by updating this page and — on request — by email. To be notified of changes, email hello@mdreel.com and ask to be added to the subprocessor-change list.
If you object to a new subprocessor on reasonable data-protection grounds during the notice period, contact us at hello@mdreel.com. If we cannot resolve your objection, you may terminate the affected part of the Service, as set out in the Data Processing Agreement.
Published by Royalcode Robert Sztygowski, ul. Józefa Wybickiego 2/9, 05-820 Piastów, Poland · VAT PL 8222319203 · hello@mdreel.com. Version 1.0, effective 2026-07-18.