How this list works
The vendors below provide infrastructure and operational capabilities Muster relies on. We engage each under written terms that include data-protection obligations equivalent to ours. We will give Customers at least 30 days notice before adding or replacing a subprocessor on the active list.
To receive notifications of changes by email, ask your tenant administrator to subscribe at hello@muster.team.
Active subprocessors
| Vendor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Turso | Managed libSQL database hosting (production and staging tenant data). | EU primary region with regional replicas | EU; SCCs where any replica is outside the EEA |
| Netlify | Static hosting, DNS, and edge delivery of the marketing site and the Muster web application shell. | Global edge network | SCCs |
| Stripe | Subscription billing, payment processing, customer-facing invoicing. | EU/US | SCCs |
| Sentry | Error tracking and performance monitoring (no personal content captured by default). | EU region | EU; SCCs where applicable |
AI model inference
Muster runs language-model inference on self-hosted infrastructure inside Muster's own environment. No third-party AI vendor receives Customer email content, SharePoint policy passages, or generated drafts. There is therefore no AI-vendor subprocessor on this list.
Customer integrations (not subprocessors)
When a Customer connects an external system to Muster (for example Microsoft 365, Outlook, or SharePoint), that system is the Customer's vendor, not ours. The Customer is responsible for the contractual and data-protection relationship with that vendor. Muster transmits only the data the Customer has authorised the connector to share, and only for the purpose of monitoring the shared mailbox and retrieving the policy library the Customer has linked.
Contact
Questions about a subprocessor: hello@muster.team.