Sub-processors
Translation for reference. The Spanish version is the binding one.
Last updated: 2026
The following providers process data on behalf of Mekovault to operate the service. Each one is contractually bound to security levels equivalent to ours.
Data deletion when an account is closed
When a customer deletes its organization, Mekovault runs a queued and audited deletion process: delegated credentials are revoked, and the secrets project (Infisical), the database data and the record of sent emails are deleted. Brevo only processes transactional delivery and does not keep contacts or content on our behalf. Operational logs (Loki/Grafana) contain technical identifiers, not business data, and are removed by the limited retention of the observability system. The administrator receives an email with the details of each step once the process completes.
| Provider | Role | Region |
|---|---|---|
| Amazon Web Services (Lightsail) | Compute and storage infrastructure | us-east-1 (N. Virginia) |
| Cloudflare | CDN, WAF, managed DNS, DDoS protection | Global (proxy with edge in LATAM) |
| Backblaze B2 | Encrypted backups with object lock | US-West (Sacramento) |
| Tailscale | Private administrative network between VMs and CI | US 路 SOC2 Type II |
| Brevo (Sendinblue) | Transactional SMTP for emails | EU |
| MercadoPago | Payment processing in Chile | Chile |
| Frankfurter (ECB) | USD鈫扖LP exchange rate feed | EU 路 Public data |
Changes
We notify our customers at least 30 days in advance before adding a new sub-processor with access to Customer data.
Questions: cloud@mekovault.com.