I. Third-Party Sub-Processors
MinIO uses the Sub-processor’s listed below to process Customer Personal Data. Capitalized terms not defined herein shall have the same meaning as in the MinIO Data Processing Agreement (“DPA”)).
MinIO uses the Sub-processor’s listed below to process Customer Personal Data. Capitalized terms not defined herein shall have the same meaning as in the MinIO Data Processing Agreement (“DPA”)).
| Sub-processor | Location | Services Provided |
|---|---|---|
| 360Learning, Inc. | New York, New York, United States | Learning management system; processes partner and external learner names, email addresses, training completion records, and course engagement data |
| Anthropic, PBC (Claude API) | San Francisco, California, United States | AI model API; processes software usage data for internal development and operational purposes |
| Chargebee, Inc. | North Bethesda, Maryland, United States | Subscription and billing management; processes customer names, email addresses, billing addresses, subscription plan details, and invoice records |
| Chatlio LLC | Seattle, Washington, United States | Live chat widget; captures prospect names, email addresses, and chat messages from MinIO's website |
| Chili Piper, Inc. | New York, New York, United States | Meeting scheduling platform; processes prospect names, email addresses, phone numbers, and calendar availability |
| Clay | New York, New York, United States | Data enrichment platform; processes prospect names, email addresses, phone numbers, company names, job titles, and LinkedIn profile data |
| Crazy Egg, Inc. | La Mirada, California, United States | Website heatmaps and session recordings; processes visitor IP addresses, browser data, mouse movements, and any personal data visible in recorded form interactions |
| Crossbeam, Inc. | Philadelphia, Pennsylvania, United States | Partner ecosystem platform; processes customer and partner company names, account identifiers, and contact names shared for overlap analysis |
| Databricks, Inc. | San Francisco, California, United States | Data and AI analytics platform with embedded ML/AI capabilities; may process business and usage data depending on deployment |
| Dealfront Group GmbH (Leadfeeder) | Karlsruhe, Germany | Website visitor identification; processes visitor IP addresses and company identifiers to identify organizations visiting MinIO's website |
| Drata, Inc. | San Francisco, California, United States | Compliance automation platform (SOC 2, ISO 27001); processes employee names, email addresses, system access logs, and security configuration evidence collected from connected infrastructure |
| Functional Software, Inc. dba Sentry | San Francisco, California, United States | Application monitoring and error tracking; may process end-user IP addresses, browser data, and interaction data captured in error reports and session logs |
| General Counsel AI, Inc. (GC AI) | San Mateo, California, United States | AI-powered legal and contract review; processes confidential business documents for internal legal operations |
| GetEmails, LLC dba RB2B | Austin, Texas, United States | Website visitor de-anonymization; processes visitor names, email addresses, company names, job titles, and IP addresses identified from anonymous website traffic |
| GitHub, Inc. | San Francisco, California, United States | Source code repository; processes contributor names, email addresses, and source code |
| Global RADAR Solutions, Inc. | Miami, Florida, United States | Compliance screening; processes customer and partner names, addresses, dates of birth, nationality, and identity data for sanctions, PEP, and adverse media screening |
| Google LLC (Google Cloud Platform) | Mountain View, California, United States | Cloud infrastructure; hosts and processes customer data including names, email addresses, and any data stored in MinIO's cloud-hosted services |
| Google LLC (Google Workspace) | Mountain View, California, United States | Productivity suite (Gmail, Drive, Docs, Calendar); processes customer and partner names, email addresses, phone numbers, and any personal data contained in emails, documents, and shared files |
| Greenhouse Software, Inc. | New York, New York, United States | Applicant tracking system; processes candidate names, email addresses, phone numbers, home addresses, resumes, cover letters, interview notes, and hiring decision records |
| HubSpot, Inc. (including Breeze AI) | Cambridge, Massachusetts, United States | CRM and marketing automation with embedded AI (Breeze); processes customer and partner names, email addresses, phone numbers, company names, job titles, website activity, and marketing engagement records |
| Internet Security Research Group (Let's Encrypt) | San Francisco, California, United States | SSL/TLS certificate provisioning; processes domain names and server IP addresses |
| Intuit Inc. dba Mailchimp | Atlanta, Georgia, United States | Email marketing platform; processes customer and partner names, email addresses, and email engagement data (opens, clicks) |
| Livestorm SAS | Paris, France | Webinar platform; processes registrant and attendee names, email addresses, company names, and engagement data |
| Lucky Orange LLC | Overland Park, Kansas, United States | Session recordings and form analytics; processes visitor IP addresses, browser data, session recordings, and any personal data captured in form interactions |
| Midjourney, Inc. | South San Francisco, California, United States | AI image generation; processes text prompts submitted by marketing for visual content creation |
| NeverBounce (ZoomInfo Technologies, Inc.) | Vancouver, Washington, United States | Email verification; processes prospect email addresses to validate deliverability |
| Okta, Inc. (including Auth0) | San Francisco, California, United States | Identity and access management for SUBNET; processes customer names, email addresses, and authentication tokens (JWTs); does not store passwords |
| OpenAI, LLC (ChatGPT / API) | San Francisco, California, United States | AI model API; processes software usage data for internal development and operational purposes |
| Oracle Corporation (NetSuite) | Austin, Texas, United States | Cloud ERP and accounting platform; processes customer and partner names, email addresses, billing addresses, phone numbers, financial transaction data, and invoice records |
| Osano, Inc. | Austin, Texas, United States | Privacy and consent management; processes visitor IP addresses, cookie identifiers, and consent preference records |
| Otter.ai, Inc. | Mountain View, California, United States | AI meeting transcription; processes voice recordings, meeting transcripts, and attendee names which may contain confidential business or customer information |
| Outreach Corporation (including AI features) | Seattle, Washington, United States | Sales engagement platform with embedded AI; processes customer and partner names, email addresses, phone numbers, company names, job titles, and email content |
| PathFactory Corp. | Toronto, Ontario, Canada | Content engagement platform; processes prospect names, email addresses, company names, and content engagement behavior |
| ProfitSoft B.V. dba Expandi.io | Eindhoven, Netherlands | LinkedIn outreach automation; processes prospect names, email addresses, LinkedIn profile URLs, company names, and job titles |
| Qualified.com, Inc. | San Francisco, California, United States | Conversational marketing platform; processes prospect names, email addresses, company names, job titles, IP addresses, and chat messages |
| RainFocus, LLC | Lehi, Utah, United States | Event management platform; processes attendee names, email addresses, phone numbers, company names, and job titles |
| Rippling, Inc. | San Francisco, California, United States | HR, payroll, and IT management; processes employee names, home addresses, email addresses, phone numbers, Social Security numbers, tax IDs, bank account numbers, salary, and compensation data |
| SafeBase, Inc. (a Drata company) | San Francisco, California, United States | Trust center platform; processes customer and partner names, email addresses, company names, and NDA acceptance records submitted through MinIO's security review portal |
| Salesforce, Inc. (including Einstein / Agentforce) | San Francisco, California, United States | CRM platform with embedded AI (Einstein, Agentforce); processes customer and partner names, email addresses, phone numbers, company names, job titles, mailing addresses, deal history, and engagement records |
| Slack Technologies, LLC | San Francisco, California, United States | Workplace messaging; may process customer and partner names, email addresses, phone numbers, and any personal data shared in support or sales channels |
| Smartlead (521 Products Pty Ltd) | Sydney, NSW, Australia | Cold email outreach; processes prospect names, email addresses, and email content |
| Sprout Social, Inc. | Chicago, Illinois, United States | Social media management; processes prospect and customer social media handles, names, and direct message content |
| Stripe, Inc. | South San Francisco, California, United States | Payment processing; processes customer names, email addresses, billing addresses, payment card numbers, and transaction records |
| Twilio Inc. (including SendGrid) | San Francisco, California, United States | Communication services (SMS, voice, email); processes customer and partner names, email addresses, phone numbers, and message content |
| Webflow, Inc. | San Francisco, California, United States | Website hosting; processes visitor IP addresses, browser data, and any personal data submitted through website forms (names, email addresses, phone numbers) |
| Wistia, Inc. | Cambridge, Massachusetts, United States | Video hosting and analytics; processes viewer email addresses (when gated), IP addresses, and video engagement data |
| X.AI Corp. (Grok API) | Palo Alto, California, United States | AI model API; processes software usage data submitted via API for internal development purposes |
| Zoom Video Communications, Inc. (including AI Companion) | San Jose, California, United States | Video conferencing with embedded AI (AI Companion); processes customer and partner names, email addresses, voice recordings, video recordings, meeting transcripts, and chat messages |
The Sub-Processors List may be updated from time to time in accordance with the DPA.
Personal Data may be stored and processed in the following locations:
Reach out to legal@min.io for any questions regarding MinIO Sub-processors.
