Maven Clinic
Subprocessor List

Last updated: June 9, 2025

Maven Clinic Co. ("Maven") engages certain sub-processors to assist in providing our virtual care platform for women's and family health. These sub-processors may process Personal Data only to the extent necessary to deliver the services.

For purposes of this list, "Personal Data" means any information relating to an identified or identifiable natural person that Maven receives or obtains directly from and processes at the direction of Customer in connection with the Services performed under the Agreement.

Maven requires all sub-processors to enter into appropriate data processing agreements, including Business Associate Agreements where applicable, that protect Personal Data in accordance with applicable privacy laws.

Maven will post updates to this list at https://www.mavenclinic.com/subprocessors at least thirty (30) days prior to adding or removing a sub-processor. For questions or to subscribe to updates, please contact subprocessors@mavenclinic.com.

Sub-processor List

Cloud Infrastructure & Platform Services

Subprocessor

Purpose

Geographical Location

Security/Trust Center

Google Cloud Platform (includes Gemini, Looker, Workspace)

Cloud computing infrastructure, analytics, AI models

United States (as configured by Maven)

Island.io

Secure enterprise browser

United States (as configured by Maven)

Data Integration, Storage & Analytics

Subprocessor

Purpose

Geographical Location

Security/Trust Center

Fivetran

Automated data integration

United States (as configured by Maven)

Dbt Cloud

Data transformation

United States (as configured by Maven)

Elastic

Search, security, observability

United States (as configured by Maven)

Snowplow

Behavioral data collection

United States (as configured by Maven)

Mixpanel

Product analytics

United States (as configured by Maven)

Security, Identity & Access Management

Subprocessor

Purpose

Geographical Location

Security/Trust Center

Cloudflare

CDN, DDoS protection, web application firewall

United States (as configured by Maven)

Datadog

Monitoring and analytics

United States (as configured by Maven)

Okta

Identity and access management

United States (as configured by Maven)

Communication & Engagement Platforms

Subprocessor

Purpose

Geographical Location

Security/Trust Center

Braze, Inc.

Multichannel customer engagement

United States (as configured by Maven)

Twilio (includes Sendgrid)

Messaging, phone, email

United States (as configured by Maven)

Zoom
(Notetaker new June 2025)

Video conferencing, AI Notetaker

United States (as configured by Maven)

Slack

Team messaging/collaboration

United States (as configured by Maven)

Customer Support & Success

Subprocessor

Purpose

Geographical Location

Security/Trust Center

Zendesk

Customer service/support tickets

United States (as configured by Maven)

Forethought
(new June 2025)

AI-powered customer service (Support Chat)

United States (as configured by Maven)

Gainsight

Customer success management

United States (as configured by Maven)

Healthcare Data & Member Services

Subprocessor

Purpose

Geographical Location

Security/Trust Center

Zus Health

Healthcare data aggregation

United States (as configured by Maven)

Peak 1 Administration

Claims/payment processing for member benefits

United States (as configured by Maven)

Marketing, Content & Experience Management

Subprocessor

Purpose

Geographical Location

Security/Trust Center

Prisma Graphic

Marketing logistics, mailhouse, collateral printing

United States (as configured by Maven)

Maytech

Secure SFTP for file transfers

United States (as configured by Maven)

Contentful

Content management system

United States (as configured by Maven)

Momentive (Survey Monkey)

Survey and experience management

United States (as configured by Maven)

Artificial Intelligence & Machine Learning

Subprocessor

Purpose

Geographical Location

Security/Trust Center

Google Gemini
(new June 2025)

AI models (part of Google Cloud)

United States (as configured by Maven)

OpenAI
(new June 2025)

AI models and APIs

United States (as configured by Maven)

Anthropic
(new June 2025)

AI models

United States (as configured by Maven)

Feature Management & Deployment

Subprocessor

Purpose

Geographical Location

Security/Trust Center

LaunchDarkly

Feature flagging and release management

United States (as configured by Maven)