Legal & Compliance

Sub-processors

Mango Technologies Ltd engages the following third-party sub-processors to provide the maivis platform. Each has been reviewed for compliance with DIFC Data Protection Law 2020. Data processing agreements are in place with each provider.

Provider	Purpose	Region	DPA
Google Cloud Platform Primary cloud provider. Data at rest in me-central1 (Doha, Qatar). AI processing via Gemini Enterprise Agent Platform global endpoint with contractual Zero Data Retention — Google cannot store or train on your data.	AI inference (Gemini Enterprise Agent Platform), object storage (Cloud Storage), relational database (Cloud SQL), encryption key management (Cloud KMS), compute (Cloud Run), authentication (Firebase)	GCP me-central1 (Middle East, Doha) for storage/compute; Gemini Enterprise Agent Platform global (US/EU) for AI with Zero Data Retention	Google Cloud DPA
Anthropic (via Google Cloud Model Garden) Accessed exclusively via Google Cloud Model Garden. No direct Anthropic API calls. Google Cloud ZDR applies.	Advanced AI analysis — portfolio rebalancing, succession assessment, complex reasoning tasks	GCP global endpoint (via Gemini Enterprise Agent Platform)	Google Cloud DPA covers
Stripe PCI-DSS Level 1 certified. Card data never touches maivis servers.	Payment card processing, subscription management, billing portal	Global (Stripe infrastructure)	Stripe Data Processing Agreement
Firebase (Google)	Authentication, identity management, FIDO2 passkey verification	GCP global	Google Cloud DPA
PostHog Analytics are opt-in only (DIFC DPL 2020 Art. 11). No data collected without explicit user consent.	Product analytics — session recording, event tracking, funnel analysis	EU (PostHog Cloud EU)	PostHog DPA

Under DIFC Data Protection Law 2020 Articles 26–27, Mango Technologies Ltd remains the data controller responsible for all personal data processed by sub-processors on its behalf. Each sub-processor is bound by contractual obligations that are no less protective than the obligations in our Data Processing Agreement.

Last updated: 13 May 2026. Updates to this list will be published here with a new effective date.

Questions about sub-processor data processing? privacy@maiviswealth.com