E2E Design AB uses the suppliers below to run Midland. Each one works under a data processing agreement with us, and we remain responsible to our customers for what they do.
Suppliers that handle workspace content
| Supplier | What it does for Midland | Data it handles | Where | Safeguard for transfers outside the EU and EEA |
|---|---|---|---|---|
| Supabase, Inc. (hosted on Amazon Web Services) | Database, sign-in and picture storage | All workspace content and all account data | Stockholm, Sweden | Standard contractual clauses |
| Vercel Inc. | Runs the application and carries traffic to it | Workspace content and account data in transit; technical logs (IP address, browser type, address requested) kept for 1 day | Application runs in Stockholm. Vercel's network handles requests at the location nearest the user, worldwide. The company is in the United States | Standard contractual clauses; EU–US Data Privacy Framework |
Suppliers that handle account data only
These never receive workspace content.
| Supplier | What it does for Midland | Data it handles | Where | Safeguard for transfers outside the EU and EEA |
|---|---|---|---|---|
| Resend (Plus Five Five, Inc.) | Sends sign-in and invitation emails | Recipient email address and the email itself. An invitation names the workspace and the person who sent it | United States | Standard contractual clauses |
| PostHog | Usage analytics | An account identifier and usage events: pages opened, sign-up steps, and for agent calls the tool name, duration and result. No email address, no content | Frankfurt, Germany | Not transferred outside the EU in normal operation; standard contractual clauses otherwise |
What is not on this list
The agents you connect. When a person approves an agent, or a workspace adds a courier, the customer chooses that tool and its supplier. We do not engage them, so they are not our sub-processors. Content an agent reads from Midland goes to that supplier on the customer's instruction and is handled under the customer's agreement with them.
Midland itself does not call any AI model.
Changes
We email the people in each workspace at least 14 days before we add or replace a supplier that handles workspace content, as our Data Processing Agreement describes. To ask a question or object, write to support@midland.md.