Legal

Subprocessors.

Last updated 15 September 2026Operator Abiroot SARL, Lebanon

These are the companies that process personal data on our behalf to run tamr. Each one sees only the data it needs for its job.

What this list is

A subprocessor is a vendor that handles personal data for us. When a restaurant uses tamr, we are its processor, and these vendors are our subprocessors under the data processing addendum. For restaurant accounts, where we are the controller, they are our processors. How we use the data is explained in our privacy policy.

Hosting and infrastructure

DigitalOcean
Application servers and database hosting.
Data: All platform data.
Location: Amsterdam, Netherlands.
Cloudflare
Content delivery, DNS, firewall and bot protection (including Turnstile), and R2 object storage for uploaded files and encrypted backups.
Data: All traffic passing through the network, uploaded files, encrypted backups.
Location: Global edge network. R2 storage uses an Eastern Europe (EU) location hint.
[Lawyer to confirm: whether an R2 location hint is sufficient for EU data residency]

AI and menu import

OpenRouter
Routes AI waiter, tamr AI assistant and menu import requests to model providers. Requests are sent with data collection denied, so providers that retain or train on prompts are excluded.
Data: Prompts, including menu content and guest messages with phone numbers and emails removed.
Location: United States.
Google (via OpenRouter)
Gemini models for the AI waiter, assistant and menu import.
Data: Prompts as above.
Location: Depends on the provider endpoint OpenRouter selects.
[Lawyer to confirm: processing location of model providers reached through OpenRouter]
Anthropic (via OpenRouter)
Claude models, reached through Anthropic, Amazon Bedrock, Google Vertex or Microsoft Azure.
Data: Prompts as above.
Location: Depends on the provider endpoint OpenRouter selects.
OpenAI
Transcribes guest voice notes. tamr does not store the audio.
Data: Guest audio recordings.
Location: United States.
Mistral AI
Reads text from uploaded menu PDFs and photos (OCR).
Data: Menu documents uploaded by restaurants.
Location: France, EU.
Firecrawl
Fetches a restaurant's menu website when it imports a menu.
Data: Public web pages.
Location: United States.
Langfuse
Traces AI requests so we can check quality and debug problems.
Data: Prompts and replies, with emails and phone numbers masked.
Location: Germany, EU.

Monitoring and analytics

Sentry
Error monitoring, and session replay with text and inputs masked and media blocked, only with analytics consent.
Data: Error details. Cookies, headers and IP addresses are not sent by default.
Location: United States.
[Lawyer to confirm: Sentry data region]
PostHog
Product analytics.
Data: Usage events. Cookies only with analytics consent.
Location: EU region.

Email, payments and sign-in

Resend
Transactional email: sign-in codes, invitations and alerts.
Data: Email address and message content.
Location: United States.
Dodo Payments
Payments and subscriptions, acting as merchant of record.
Data: Billing details.
Location: See note.
[Lawyer to confirm: Dodo Payments processing location and whether it acts as an independent controller as merchant of record]
Google and GitHub
Optional sign-in, only if a user chooses it.
Data: Name, email address and avatar from the chosen account.
Location: United States.
Migadu
Our hello@ and support mailbox.
Data: Emails you send us.
Location: Switzerland.

A restaurant can also add its own advertising pixels to its menu (Meta, Google, TikTok, Snap). Those are chosen and controlled by the restaurant, not by tamr, and are not listed here. See the cookies page.

International transfers

Our main hosting is in the EU. Where a vendor processes data outside the EU, we rely on its Standard Contractual Clauses or equivalent data processing terms. [Lawyer to confirm: transfer mechanism in place for each vendor]

Changes to this list

We update this page before a new subprocessor starts handling personal data, and give restaurants notice of the change. [Lawyer to confirm: notice method, notice period and objection process]

Questions

Email [email protected] for a copy of our processor terms or to ask about a specific vendor.