Last updated: August 2026
marql uses the third-party sub-processors below to operate the service. Each is bound by a data-processing agreement. AI features run on open-weight models — we do not send data to OpenAI or Anthropic, and providers do not train on your data. In the marql platform and its AI assistant, store and partner names are replaced with opaque codes before a query leaves our systems.
If you embed the marql consumer chat widget on your website, your visitors' messages are answered by one of three AI inference providers — Together AI, Groq or Fireworks AI. The active one is set by configuration and may change between releases, so all three are listed here as recipients of widget traffic. The context sent with a visitor's message is not anonymised: the assistant exists to tell a shopper which of your shops stocks an item and where that shop is, so your shop names and addresses are sent as they are. What is not needed to answer is held back — the shop list reaches the model by name only, a street address only when a visitor asks for one, and the contact left for a pre-order is not echoed back into the model. For this data you are the controller and marql is your processor, so this list is also your sub-processor list for the widget. Conversations are deleted automatically after the retention window on your widget settings page, never longer than 90 days; a pre-order is kept as a separate record under its own window on the same page, never longer than 365 days.
| Sub-processor | Purpose | Data | Region |
|---|---|---|---|
| Amazon Web Services (Aurora) | Primary database hosting | All platform data | EU (Stockholm, eu-north-1) |
| Railway | Application hosting & orchestration | Requests, logs | EU (west) |
| Cloudflare R2 | Object storage (reports, uploads) | Generated files, uploads | EU |
| Together AI | AI inference (analytical models; may serve the consumer widget) | Platform: anonymised queries + metrics (store names masked). Consumer widget: visitor messages, real shop names and addresses | US |
| Groq | AI inference (fast routing/gates; may serve the consumer widget) | Platform: anonymised queries. Consumer widget: visitor messages, real shop names and addresses | US |
| Fireworks AI | AI inference & embeddings; may serve the consumer widget | Platform: anonymised queries + documents. Consumer widget: visitor messages, real shop names and addresses | US |
| Langfuse GmbH | LLM observability — traces of AI calls | Model ids, token counts, latency, pseudonymous org/session ids; masked prompts/completions only when explicitly enabled | EU (cloud.langfuse.com) |
| ElevenLabs | Voice synthesis for spoken chat answers (opt-in voice mode) | Short spoken answer summaries; not stored by marql | US/EU |
| Deepgram | Live speech recognition in voice mode (opt-in) | Microphone audio, transient — transcribed and discarded | US |
| Resend | Transactional email | Email address, message content | EU/US |
| Stripe | Payment processing | Billing details (Stripe is controller for card data) | EU/US |
| Telegram | Optional bot notifications (opt-in) | Messages to linked chats | Global |
We update this list when sub-processors change. Questions: [email protected].