Sub-processors
Last updated October 22, 2026
memberbeam uses a small number of trusted third-party providers (“sub-processors”) to help deliver the Service. This page lists the sub-processors that may process personal data on behalf of Organizations, as described in our Data Processing Addendum.
Every sub-processor is reviewed for security and privacy before we engage it and is bound by written data protection terms. Where a sub-processor processes personal data outside the European Economic Area or the United Kingdom, we rely on appropriate transfer safeguards, such as the Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-U.S. Data Privacy Framework.
How to read this list
- Data location is where the provider primarily processes or stores data for memberbeam. Where a provider operates a global network, some processing may take place in other locations.
- Applies to shows whether a provider is used for every Organization, or only when an Organization turns on a particular feature or integration.
- Organizations’ primary data is stored on Amazon Web Services in the region assigned to their account (United States or European Union).
Infrastructure and core services
| Name | Purpose | Data location | Applies to |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting, databases, file storage, backups; email delivery for campaigns and automations (Amazon SES) | United States or European Union, matching the Organization’s region | All Organizations |
| Cloudflare, Inc. | Content delivery network, DNS, custom domain and SSL management, DDoS protection, web application firewall | Global edge network; United States | All Organizations |
| Temporal Technologies, Inc. | Workflow orchestration for scheduled and background jobs, such as renewals, reminders, and automations | United States | All Organizations |
| JourneyApps, Inc. (PowerSync) | Offline data synchronization for the organizer mobile apps | United States or European Union | Organizations using the mobile apps |
| Postmark (ActiveCampaign, LLC) | Transactional email, such as receipts, login links, and notifications | United States | All Organizations |
| Sentry (Functional Software, Inc.) | Error and performance monitoring | United States | All Organizations |
| PostHog, Inc. | Product analytics | European Union | All Organizations |
Payments
| Name | Purpose | Data location | Applies to |
|---|---|---|---|
| Stripe, Inc. and its affiliates | Payment processing through Stripe Connect, Tap to Pay, platform fee collection, and memberbeam subscription billing | United States; other locations as needed to process payments | All Organizations that accept online payments or subscribe to a paid plan |
| GoCardless Ltd | Direct debit payment collection | United Kingdom and European Union | Organizations that connect GoCardless |
Communications
| Name | Purpose | Data location | Applies to |
|---|---|---|---|
| Twilio Inc. | SMS messaging | United States | Organizations that enable SMS |
| Apple Inc. | Apple Wallet pass delivery and push notifications for pass updates | United States | Organizations that issue Apple Wallet passes |
| Google LLC | Google Wallet pass delivery and pass updates | United States | Organizations that issue Google Wallet passes |
Features and integrations
| Name | Purpose | Data location | Applies to |
|---|---|---|---|
| Anthropic, PBC | AI features, such as drafting and summarization. Customer data is not used to train models. | United States | Organizations that use AI features |
| Intuit Inc. (QuickBooks Online) | Accounting sync | United States | Organizations that connect QuickBooks Online |
| Xero Limited | Accounting sync | United States and Australia | Organizations that connect Xero |
Support and internal operations
| Name | Purpose | Data location | Applies to |
|---|---|---|---|
| Plain (Plain Ltd) | Customer support ticketing and chat | United States and European Union | Organizations that contact support |
| Google LLC (Google Workspace) | Internal email, documents, and support correspondence | United States | Organizations that contact memberbeam |
Integrations you control
Some services, such as Zapier or other tools connected through our API and webhooks, receive data only because an Organization chooses to connect them. Those services act on the Organization’s instructions under the Organization’s own agreement with them and are not memberbeam sub-processors.
Changes to this list
We will give at least 30 days’ notice before a new sub-processor begins processing personal data on behalf of Organizations. We do this by updating this page and emailing everyone who has subscribed to updates. In an emergency, for example where we need to replace a provider that has failed, we may give shorter notice and will notify subscribers as soon as reasonably practicable.
Subscribe to updates
To be notified of changes, email privacy@memberbeam.com with the subject line “Subscribe to sub-processor updates” and include your Organization’s name. You can unsubscribe at any time by emailing the same address.
Objecting to a change
If you have a reasonable data protection concern about a new sub-processor, email privacy@memberbeam.com within the notice period. We will work with you in good faith to address it. If we cannot, you may terminate the affected service as described in our Data Processing Addendum.
Questions
For questions about our sub-processors or to request copies of our data protection terms with them, contact privacy@memberbeam.com.