Website Subprocessors
Effective Date: August 3, 2026
This page lists the third-party service providers (“subprocessors”) that BLOS Platforms Inc. (“Maura,” “we,” “us,” or “our”) engages to process personal data on our behalf in connection with our website (https://www.maurainc.com/) and Partner-facing web app (together, the “Services” for purposes of this page).
This list supplements our Website & Web App Privacy Policy. Capitalized terms used but not defined here have the meanings given in that Privacy Policy.
We may update this list from time to time as we add, replace, or remove service providers. The “Effective Date” above reflects the most recent update. Please check this page periodically for changes.
Scope
This list covers subprocessors used to operate, host, manage content for, deliver email from, analyze usage of, and otherwise support the Services described above.
It does not cover:
- Subprocessors used solely in connection with our mobile application (see our App Subprocessors list).
- Independent third parties that process personal data as separate controllers (for example, social media platforms when you interact with them outside our Services), except where they act as our service providers.
- Additional tags, pixels, or tools that may be loaded through Google Tag Manager after you grant cookie consent. Those tools, if configured, may constitute additional subprocessors or third-party controllers and will be reflected here when engaged.
Our Subprocessors
| Subprocessor | Service | Purpose of processing | Categories of personal data (typical) | Location |
| Vercel Inc. | Website hosting, content delivery, serverless functions, and Vercel Analytics | Hosts and delivers the website; processes requests to our application and APIs; collects anonymous or aggregated web performance/usage metrics | Internet and network activity information (such as IP address, device/browser data, pages visited, referrer); form submission request metadata | United States |
| TinaCMS / Tina Cloud (TinaCMS Inc. or its affiliates) | Content management system | Stores, serves, and enables editing of website content used by the Services | Content and configuration data; editor authentication and preview-related identifiers | United States |
| Cloudinary Inc. | Media storage and content delivery | Stores and delivers images and other media used on the website and managed through our CMS | Media files and associated metadata; request/log data related to media delivery | United States |
| Resend, Inc. | Transactional email delivery | Sends emails generated by website forms (for example, pilot / get-started applications) to our internal recipients | Contact information and identifiers submitted via forms (such as name, email address, company, and free-text notes); email delivery metadata | United States |
| Google LLC | Google Tag Manager | Loads and manages analytics and related tags on the website subject to cookie consent settings | Internet and network activity information; consent preferences; tag/event data | United States |
| Google LLC | Google Analytics (GA4) | Measures website traffic and usage to help us understand and improve the Services (loaded via Tag Manager and subject to cookie consent) | Internet and network activity information (such as approximate location derived from IP, device/browser data, pages visited, events) | United States |
| GitHub, Inc. | Source code and content repository | Hosts the git-backed content repository used by our CMS and deployment workflow | Website content and configuration stored in the repository (which may include operational contact details such as form notification recipients); repository access logs for authorized users | United States |
How We Use These Providers
- Hosting and infrastructure. Vercel hosts the Services and processes technical request data necessary to deliver pages and API responses.
- Content and media. TinaCMS and Cloudinary help us manage and deliver website content and media.
- Communications. Resend delivers transactional emails that contain personal data you submit through website forms.
- Analytics and measurement. Google Tag Manager and Google Analytics help us understand how the website is used. Cookie-based analytics storage and advertising-related signals default to denied until you accept cookies, as described in our Privacy Policy and cookie consent experience.
- Development and publishing. GitHub stores the content and code that power the website as part of our CMS and deployment workflow.
Transfers
Some of our subprocessors are located in, or process personal data in, the United States and other countries that may not provide the same level of data protection as your country of residence. Where required, we rely on appropriate transfer mechanisms and contractual protections with our providers. See Section 6 and Section 7 of our Website & Web App Privacy Policy for more information.
Updates to This List
We may update this Subprocessors list to reflect changes to our service providers or the Services. Material changes will be indicated by updating the Effective Date on this page. Continued use of the Services after an update constitutes acknowledgment of the revised list to the extent permitted by applicable law.
If you are a Partner with a written agreement that requires advance notice of subprocessor changes, that agreement controls to the extent of any conflict with this page.
Contact Us
If you have questions about this Subprocessors list or how we process personal data, please contact us at privacy@maurainc.com.
For broader information about our privacy practices, please see our Website & Web App Privacy Policy.