01 What a sub-processor is
A sub-processor is an outside company that processes customer data for MenuMap. Customer data is anything that a customer or its users give MenuMap. Examples are the names and email addresses of its users, data about its own customers, menus, notes and comments.
Our customers authorise this list in the data processing agreement.
02 Our sub-processors
| Company | What it does for MenuMap | Customer data it gets | Where | Safeguard |
|---|---|---|---|---|
| Microsoft AzureMicrosoft Ireland Operations Limited | Hosts the MenuMap service: the API, the databases, the file storage and the store of current work. It also runs the server that reads and analyses menus, the key vault, the backups and the technical logs. | All customer data | EU: the Azure regions Germany West Central and Sweden Central | Microsoft Products and Services Data Protection Addendum |
| Microsoft Azure AI FoundryMicrosoft Ireland Operations Limited | Reads menu files with OpenAI models, and finds the dishes and ingredients in them | Menu files, the text read from them, dish lists and the product names in the customer's catalogue. Menu text can include a sole trader's contact details. | Reading the menu files runs in the EU data zone. Later analysis steps may run in any region where Microsoft deploys the model. | Microsoft Products and Services Data Protection Addendum with the EU standard contractual clauses |
| Microsoft 365Microsoft Ireland Operations Limited | Sends the sign-in codes by email from MenuMap's mailbox | The user's email address, the code and the time that we sent it | EU and EFTA | Microsoft Products and Services Data Protection Addendum |
| HetznerHetzner Online GmbH | Hosts MenuMap's development server | Copies of menu files that we use to test the quality of the menu analysis | EU (Helsinki, Finland) | Hetzner's data processing agreement |
| VercelVercel Inc. | Delivers the pages and scripts of the MenuMap web app. The data in the app goes between the browser and our API on Azure, not through Vercel. | IP address, browser details and the addresses of the pages requested, in Vercel's request logs. Page performance data, only after the user agrees. | USA, and Vercel's global network | Vercel's data processing addendum with the EU standard contractual clauses |
| AnthropicAnthropic Ireland, Limited | AI services that we use to operate and support the MenuMap service | Customer data that we process with these services while we operate and support the service | USA | Anthropic's data processing addendum with the EU standard contractual clauses |
03 Before this list changes
We tell our customers at least 14 days before a new sub-processor starts. We send the notice by email to the notice address in the customer's Order Form.
A customer can object to the new sub-processor within those 14 days.
04 Get the notices
Anyone can get these notices. Send an email to privacy@menumap.ai with the subject "Subscribe to sub-processor changes".
05 Changes
| Date | Change |
|---|---|
| 2 November 2026 | First publication |