Sub-Processor List
Last updated: April 14, 2026
Mataki Labs LLC (“Sandbar,” “we,” “us,” or “our”) uses the following third-party sub-processors to process personal data on behalf of our customers in connection with the Sandbar platform and related services. This list is maintained in accordance with the Data Processing Addendum.
Current Sub-Processors
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Cloud Platform | Cloud infrastructure, hosting, CDN, and storage | All Customer Data (deployed files, site configuration, deploy metadata, account information, API request logs) | United States (us-central1) |
| Netlify | Marketing website hosting | IP addresses, request metadata | United States |
| Clerk | User authentication and identity management | Name, email address, authentication credentials, session data | United States |
| Stripe | Payment processing and billing | Name, email address, billing address, payment method details, transaction history | United States |
Sub-Processor Details
Google Cloud Platform (Google LLC) Google Cloud Platform provides the core infrastructure on which the Sandbar platform operates, including Google Cloud Storage (GCS) for deploy file storage, Cloud CDN for content delivery, compute services for the API and console, and database services for account and site metadata. All Customer Data, including deployed files, is stored and processed within the us-central1 region. Google Cloud maintains SOC 2, ISO 27001, and other industry-standard certifications.
Netlify (Netlify, Inc.) Netlify hosts the Sandbar marketing website (sandbar.cloud). Netlify processes only IP addresses and HTTP request metadata associated with visitors to the marketing website. Netlify does not have access to Customer Data stored within the Sandbar platform.
Clerk (Clerk, Inc.) Clerk provides authentication and user session management for the Sandbar console. Clerk processes user names, email addresses, authentication credentials (passwords and multi-factor authentication data), and session tokens for users who log into the Sandbar platform.
Stripe (Stripe, Inc.) Stripe processes payment transactions and manages billing for Sandbar subscriptions. Stripe receives and processes customer names, email addresses, billing addresses, payment method details, and transaction history. Sandbar does not store full payment card numbers on its own systems.
Change Notification
In accordance with Section 4 of the Data Processing Addendum, Sandbar will provide at least thirty (30) days’ prior written notice before a new sub-processor begins processing personal data. Notification will be provided by updating this page and by email to subscribed customers.
To subscribe to sub-processor change notifications, email dpa@sandbar.cloud with the subject line “Sub-Processor Change Notifications.”
If you wish to object to a new sub-processor, you may do so in writing within fifteen (15) days of receiving notice, as described in Section 4.4 of the Data Processing Addendum.
Change Log
| Date | Change |
|---|---|
| April 14, 2026 | Initial sub-processor list published |
Contact
For questions about this sub-processor list or Sandbar’s data processing practices, contact:
- Email: dpa@sandbar.cloud
- Legal inquiries: legal@sandbar.cloud
- Mail: Mataki Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801