Mage Technologies Inc. uses the companies below to process personal data for Mage Accounting. Each processes it only to provide its service to us, under a written agreement. We tell customers' owners at least 30 days before adding a sub-processor or changing what one does with customer data or where (see the Data Processing Addendum, section 6).
| Company | Purpose | Personal data | Location | Terms |
|---|---|---|---|---|
| Cloudflare, Inc., San Francisco, USA | Runs the website and the app (Workers, Durable Objects for live updates), stores databases (D1), files and backups (R2), delivers pages and protects them from attacks (CDN, DNS, TLS), sends emails from accounting@magetechsystems.com (password resets, statements of account), and forwards email sent to support@, dpo@ and legal@magetechsystems.com (Email Routing) | Everything in Mage Accounting: users' accounts, customers' books, payroll, contacts and uploaded files; request-form leads; support tickets; backups; IP addresses of visitors | Global network: requests are handled at the data centre nearest the user. Stored data is outside the Philippines | Cloudflare's standard data processing terms; SOC 2 Type II, ISO/IEC 27001 |
| Anthropic, PBC, San Francisco, USA | Runs the Claude AI model for the AI features: workbook conversion and Magica, the in-app assistant | The cells of a converted workbook (for example suppliers, customers, employees, amounts and TINs) and the company's account names; questions asked to Magica with the screen they were asked on, images a user attaches to a question (screenshots, photos of receipts and invoices, with the names, TINs and amounts on them; not kept by Mage), and the parts of the company’s books Magica reads to answer them (report figures, transactions, contact and employee names, read with the asking user’s own access, government ID numbers masked where that user may not see them); only for that request | Anthropic's data centres, outside the Philippines | Anthropic's commercial terms |
| Google LLC, Mountain View, USA | Runs the mailbox that receives what is sent to our addresses (support@magetechsystems.com, dpo@magetechsystems.com, legal@magetechsystems.com) and that we reply from | Emails sent to us and our replies, with anything attached: typically names, email addresses, company details, and whatever a sender includes | Google's data centres, outside the Philippines | A Google mailbox that receives what is sent to our addresses and that we reply from |
Not sub-processors. We use no analytics, advertising, tracking, error-reporting or customer-support platforms that receive personal data. Our error monitoring runs inside our own system and records no personal data. Our source code host receives no customer data.
History of changes
| Date | Change |
|---|---|
| 18 October 2026 | First published list |