Legal

Subprocessors

The third parties that help us run Merrily. Last updated June 2026.

Merrily is operated by TariffLens, Inc. To deliver the service, we rely on a small set of third parties (subprocessors) that process data on our behalf. We require each subprocessor by contract to protect the data, to process it only on our instructions, and to maintain security and confidentiality obligations consistent with our own. We publish this list so that customers and their privacy teams can review it. For how this relates to your contract, see our Data Processing Addendum.

Core subprocessors

These subprocessors store or process customer data to deliver core functionality.

Amazon Web Services (AWS)

  • Role: Cloud infrastructure and AI model inference (compute, database, object storage, and key management via ECS, RDS, S3, and KMS, plus model inference via Amazon Bedrock).
  • Legal entity: Amazon Web Services, Inc.
  • Region: United States (us-east-2, us-east-1).
  • Data processed: All stored platform data, and communications and CRM content sent to Amazon Bedrock for model inference.

Temporal Cloud

  • Role: Durable orchestration of data-sync jobs.
  • Legal entity: Temporal Technologies, Inc.
  • Region: United States (namespace in us-east-2).
  • Data processed: Sync job metadata and payloads.

Datadog

  • Role: Observability (logs, application performance monitoring, and database monitoring).
  • Legal entity: Datadog, Inc.
  • Region: United States (US5).
  • Data processed: Operational logs and sampled query text. Model prompt and response content is excluded from telemetry.

Portkey

  • Role: LLM gateway that routes inference requests to the model provider.
  • Legal entity: Portkey, Inc.
  • Region: United States.
  • Data processed: Model prompts in transit, which can include communications and CRM content.

People-enrichment providers

These providers support optional people-enrichment, which adds business context (such as job title or company) to contacts. Data shared with them is minimized to what each lookup needs. Each provider is listed below with its legal entity and processing region.

People Data Labs

  • Role: People enrichment (business contact attributes).
  • Legal entity: People Data Labs, Inc.
  • Region: United States.
  • Data processed: Work-related person attributes, minimized to the fields we need.

Apollo

  • Role: People enrichment.
  • Legal entity: ZenLeads, Inc. (doing business as Apollo.io).
  • Region: United States.
  • Data processed: Work-related person attributes. Contact-reveal features are disabled.

LeadMagic

  • Role: People enrichment.
  • Legal entity: Lead Magic Corporation.
  • Region: United States (Massachusetts).
  • Data processed: Work-related person attributes.

BetterContact

  • Role: People-enrichment aggregator that may route requests to additional downstream enrichment providers.
  • Legal entity: BetterContact SAS.
  • Region: European Union (France).
  • Data processed: Work-related person attributes.

Exa

  • Role: Open-web search for company and people signals.
  • Legal entity: Exa Labs, Inc.
  • Region: United States.
  • Data processed: Search identifiers (for example, names and company domains).

Tavily

  • Role: Open-web search for company and material-events signals.
  • Legal entity: AlphaAI Technologies Inc. (doing business as Tavily).
  • Region: United States.
  • Data processed: Search identifiers.

Connected sources (not subprocessors)

The following are sources you connect and authorize. They are your own tools and data providers, not Merrily subprocessors. Merrily reads from them with read-only, least-privilege access on your instruction.

  • Gmail (Google LLC)
  • Slack (Salesforce, Inc.)
  • Granola
  • HubSpot
  • Salesforce
  • Stripe
  • PostHog
  • PandaDoc
  • Your own PostgreSQL database

Changes to this list

This list is versioned. We post material changes here with an updated date. Customers with a signed Data Processing Addendum receive advance notice of new or replaced subprocessors and may object as set out in the DPA. To be notified of changes, contact [email protected].