Draft — requires legal review.

This document has not been reviewed by a lawyer and is not in force. Highlighted items are facts still to be supplied.

Sub-processors

The third parties that process personal data for Mortar, and what each receives.

Effective [[EFFECTIVE DATE]]

Sub-processors

These third parties process personal data so that Mortar can run. Each receives only what its task needs.

[[HOSTING PROVIDER AND REGION]]

What it does
Runs the services and stores the control plane's database and backups.
Personal data it receives
All the data the privacy notice lists.

[[EMAIL DELIVERY PROVIDER]]

What it does
Delivers sign-in links and invitations.
Personal data it receives
The recipient's email address and the message, which carries the link.

[[MODEL PROVIDER, IF ANY]]

What it does
Generates completions, where the data plane is configured to use an external model endpoint.
Personal data it receives
Prompts and completions.

Mortar gives [[SUB-PROCESSOR CHANGE NOTICE PERIOD]] notice before adding or replacing a sub-processor.

Identity providers you choose

When you sign in with GitHub, Google or Microsoft, that provider shares your profile with Mortar under its own terms. Mortar sends it only the sign-in request itself.

Bring Your Own Cloud

Prompts and completions are handled by the data plane in your environment and do not reach Mortar's control plane, which receives only the credentials it is asked to verify.