Sub-processors.
The third-party providers Mocha uses to run the Service, and what each does.
Last Updated: July 2026
Overview
Mocha Analytics ("Mocha", "we", "us") uses a small number of trusted third-party service providers ("sub-processors") to operate the Service. A sub-processor is an organisation that may process personal data on our behalf under our instructions. This page lists our current sub-processors, what each is used for, and where it primarily processes data.
We require every sub-processor to be bound by data-protection terms at least as protective as those we offer our own customers (see our Data Processing Agreement), to use data only to provide their service to us, and to keep it secure and confidential.
A. Infrastructure and operational sub-processors
These providers are engaged for every customer because they run the Service itself.
| Sub-processor | Purpose | Primary processing location |
|---|---|---|
| Railway | Application hosting and the primary PostgreSQL database | United States |
| Cloudflare (R2) | Encrypted off-site database backups | United States / global object storage |
| Vercel | Frontend application hosting and edge delivery | United States / global edge |
| Sentry | Error monitoring and performance tracing (PII minimised, inputs masked) | United States |
| Resend | Transactional and notification email delivery | United States |
| Stripe | Subscription billing and payment processing (PCI-DSS; card data held by Stripe) | United States |
| Anthropic | AI-generated insights, AI chat, and Studio compose (prompt content only) | United States |
B. Connected data-source sub-processors
These providers are engaged only if you choose to connect the corresponding integration. When connected, Mocha reads analytics and performance data from your account with that provider to display it in your dashboard. If you never connect an integration, its provider processes no data for you through Mocha.
| Sub-processor | Engaged when you connect | Purpose |
|---|---|---|
| Shopify | Always (the core store connection) | Orders, products, customers, inventory, and returns data |
| Google (GA4, Google Ads, Search Console) | Google integrations | Traffic, conversion, ad-performance, and search data |
| Klaviyo | Klaviyo | Email and SMS campaign and flow metrics |
| Omnisend | Omnisend | Email and SMS campaign and automation metrics |
| Mailchimp | Mailchimp | Email campaign and automation metrics |
| HubSpot | HubSpot | CRM and marketing engagement metrics |
| Gorgias | Gorgias | Support-ticket volume and response metrics |
| Recharge | Recharge | Subscription and recurring-revenue (MRR) metrics |
Changes to this list
We keep this page current. Before engaging a new sub-processor that processes personal data, we will update this list. Customers with an active Data Processing Agreement may request notice of material changes to our sub-processors as described in that agreement.
Contact
Questions about our sub-processors: support@mochadash.com.
Register interest.
Tell us where to find you. We'll be in touch shortly.
Thanks. We'll be in touch shortly.
Currently invitation-only. Connect Shopify in 60 seconds.