These companies process data on Momenial’s behalf. Integrations an issuer chooses to connect are marked; they receive data only when connected.

Subprocessor	Purpose	Data	Location
Cloudflare, Inc.	Hosting, database (D1), file and image storage (R2, Images), queues, bot checks (Turnstile), DNS for custom hostnames	All service data	Global network; database in the Asia-Pacific region
Amazon Web Services, Inc.	Transactional email (Amazon SES)	Recipient and issuer email addresses, message content	United States (us-west-1)
Google LLC	Issuer sign-in (Firebase Authentication); Google Wallet passes when a holder adds one	Issuer sign-in identity; pass content for holders who add a pass	United States and global
Apple Inc.	Apple Wallet passes when a holder adds one; App Store billing	Pass content; purchase identifiers	United States and global
RevenueCat, Inc.	Subscription and purchase management	Purchase identifiers, plan state, issuer account ID	United States
Partnero	Affiliate program	Affiliate account data and referral events; no holder data	European Union
Zapier, Inc. (only when connected)	Integration the issuer sets up	What the issuer sends through it	United States

Pentas is a product of PT Momenial Open Media, the same company, and is not a subprocessor.

Changes

Date	Change
November 3, 2026	First published list.