Brandmerch engages the third parties below to process customer data on our behalf in connection with providing the platform. Each is bound by a data processing agreement requiring confidentiality, appropriate security measures, and processing only on our documented instructions.
This list is maintained alongside our production systems. Customers with a data processing agreement in place may subscribe to advance notice of changes by writing to privacy@brandmerch.com.
Infrastructure
| Sub-processor | Purpose | Data processed | Location |
|---|
| Amazon Web Services (AWS) | Object storage for artwork, product images, documents, and shipping labels | Uploaded files, artwork, contract documents | United States |
| Vercel | Hosting and content delivery for the web application | Request metadata, IP addresses | United States |
| Render | Application and database hosting for the platform backend | All platform data at rest and in transit | United States |
| Cloudflare | Bot protection and abuse prevention on public forms | IP addresses, request metadata | United States |
| Sentry | Application error monitoring and diagnostics | Error traces, which may incidentally include user identifiers | United States |
Payments & Tax
| Sub-processor | Purpose | Data processed | Location |
|---|
| Stripe | Payment processing, subscription billing, and payouts | Billing contact details, payment method tokens, transaction records | United States |
| TaxJar | Sales tax rate calculation and reporting | Shipping destination address, order amounts | United States |
Logistics
| Sub-processor | Purpose | Data processed | Location |
|---|
| FedEx | Shipping rate quotes, label generation, and tracking | Recipient name, address, phone, and shipment contents | United States |
| UPS | Shipping rate quotes, label generation, and tracking | Recipient name, address, phone, and shipment contents | United States |
| United States Postal Service (USPS) | Shipping rate quotes, label generation, and tracking | Recipient name, address, and shipment contents | United States |
Communications
| Sub-processor | Purpose | Data processed | Location |
|---|
| Resend | Transactional email delivery (order, shipping, and account notifications) | Recipient email address, name, and message content | United States |
Operations
| Sub-processor | Purpose | Data processed | Location |
|---|
| OpenAI | Product image color extraction and catalog enrichment | Product imagery and catalog metadata. Not used to process customer personal data. | United States |
Suppliers and decorators
Merchandise suppliers and decorators engaged to produce or decorate a specific order are not platform sub-processors. They receive only the information required to manufacture, decorate, and ship that order, and are bound by purchase order terms and our supplier code of conduct.
Changes to this list
Brandmerch may add or replace a sub-processor as the platform evolves. Where a customer agreement or data processing agreement requires advance notice of changes, we will provide it in accordance with that agreement. Previous versions of this list are available in the version archive.