These are the companies that process personal data on our behalf to run tamr. Each one sees only the data it needs for its job.
What this list is
A subprocessor is a vendor that handles personal data for us. When a restaurant uses tamr, we are its processor, and these vendors are our subprocessors under the data processing addendum. For restaurant accounts, where we are the controller, they are our processors. How we use the data is explained in our privacy policy.
Hosting and infrastructure
Data: All platform data.
Location: Amsterdam, Netherlands.
Data: All traffic passing through the network, uploaded files, encrypted backups.
Location: Global edge network. R2 storage uses an Eastern Europe (EU) location hint.
[Lawyer to confirm: whether an R2 location hint is sufficient for EU data residency]
AI and menu import
Data: Prompts, including menu content and guest messages with phone numbers and emails removed.
Location: United States.
Data: Prompts as above.
Location: Depends on the provider endpoint OpenRouter selects.
[Lawyer to confirm: processing location of model providers reached through OpenRouter]
Data: Prompts as above.
Location: Depends on the provider endpoint OpenRouter selects.
Data: Guest audio recordings.
Location: United States.
Data: Menu documents uploaded by restaurants.
Location: France, EU.
Data: Public web pages.
Location: United States.
Data: Prompts and replies, with emails and phone numbers masked.
Location: Germany, EU.
Monitoring and analytics
Data: Error details. Cookies, headers and IP addresses are not sent by default.
Location: United States.
[Lawyer to confirm: Sentry data region]
Data: Usage events. Cookies only with analytics consent.
Location: EU region.
Email, payments and sign-in
Data: Email address and message content.
Location: United States.
Data: Billing details.
Location: See note.
[Lawyer to confirm: Dodo Payments processing location and whether it acts as an independent controller as merchant of record]
Data: Name, email address and avatar from the chosen account.
Location: United States.
Data: Emails you send us.
Location: Switzerland.
A restaurant can also add its own advertising pixels to its menu (Meta, Google, TikTok, Snap). Those are chosen and controlled by the restaurant, not by tamr, and are not listed here. See the cookies page.
International transfers
Our main hosting is in the EU. Where a vendor processes data outside the EU, we rely on its Standard Contractual Clauses or equivalent data processing terms. [Lawyer to confirm: transfer mechanism in place for each vendor]
Changes to this list
We update this page before a new subprocessor starts handling personal data, and give restaurants notice of the change. [Lawyer to confirm: notice method, notice period and objection process]
Email [email protected] for a copy of our processor terms or to ask about a specific vendor.