Sub-processors
This page lists every third-party service that processes Mavi Pay customer data on behalf of mavi Finans, Limassol, Republic of Cyprus. We engage a sub-processor only where it is needed to run the service reliably and securely.
Each sub-processor is engaged under a data-processing agreement that limits it to the purpose stated below. Transfers outside the EU rely on Standard Contractual Clauses with appropriate safeguards — encryption in transit (TLS) and at rest, and minimisation of what we send to each processor.
| subprocessor | purpose | location | status |
|---|---|---|---|
| Stripe, Inc. | Card payment processing, checkout and fraud prevention.Handles all card data; full card numbers never touch mavi pay infrastructure. Engaged wherever a payment is taken. | United States; EU processing via Stripe's EU entities | active |
| mittera.eu | Transactional email — receipts, invoices, sign-in links and account notices.EU-operated. Receives only the address and content needed to deliver each message. | European Union | active |
| Briven | Database and encrypted object storage for the platform's data.EU-hosted infrastructure. Data is encrypted in transit and at rest; each seller's data is isolated at the data layer. | European Union | active |
02Change-notification policy
We publish material changes to this list before a new sub-processor begins processing customer data. "Material" means adding a sub-processor, replacing one with a substantively different service, or expanding an existing sub-processor's access to a category of data not previously covered. If a change is unacceptable for your use case, you may close your account and export your data without penalty.
03Questions
Contact privacy for any sub-processor-related question, including requests for the underlying data-processing agreements where they are not publicly available.