Sub-Processors
All third-party services that process personal information on Merion's behalf. Updated as sub-processor relationships are added, removed, or materially changed.
Merion engages the following sub-processors in the delivery of its platform and services. Each sub-processor is bound by appropriate data processing agreements. Where a sub-processor is located overseas, Merion has taken reasonable steps to ensure that personal information is handled in accordance with Australian Privacy Principles (APP 8).
Last reviewed: June 2026.
Stripe
- Purpose
- Payment processing — credit/debit card (Visa, Mastercard) and BECS direct debit for debtor payments.
- Data category
- Payment card data, BSB/account numbers (tokenised; never stored by Merion), payment history.
- Location
- United States (Stripe Inc.) / Australian subsidiary Stripe Payments Australia Pty Ltd.
Hostinger
- Purpose
- Web hosting and server infrastructure for Merion's application stack.
- Data category
- Application data, database content, log files.
- Location
- Lithuania (UAB Hosting Media) / global data centres.
Cloudflare
- Purpose
- DNS hosting, content delivery network (CDN), web application firewall (WAF), and DDoS mitigation.
- Data category
- IP addresses, HTTP request metadata, cached static assets.
- Location
- United States (Cloudflare Inc.) / global edge network.
Anthropic
- Purpose
- Optional AI features powered by the Claude API — used selectively for document analysis and drafting assistance.
- Data category
- Text content submitted for AI processing (no raw PII unless explicitly included in submitted content).
- Location
- United States.
OpenAI
- Purpose
- Optional AI features powered by the GPT API — used selectively for supplementary AI processing tasks.
- Data category
- Text content submitted for AI processing (no raw PII unless explicitly included in submitted content).
- Location
- United States.
Sentry / GlitchTip
- Purpose
- Application error monitoring and crash reporting. GlitchTip is used as a self-hosted alternative for some environments.
- Data category
- Error stack traces, anonymised session context. PII is scrubbed from error payloads before transmission.
- Location
- United States (Sentry Inc.) / self-hosted (GlitchTip).
AI sub-processors — important note
Anthropic and OpenAI are engaged for optional AI features only. These features are not used in standard collection workflows. When AI processing is used, text is submitted without embedding raw personally identifiable information where this can be avoided. Merion does not use AI outputs to make automated decisions about individual debtors without human review.
Changes to this list
Merion will update this page when a new sub-processor is engaged or an existing relationship ends or materially changes. Creditor clients who require advance notice of sub-processor changes should include this in their service agreement. For questions about sub-processors, contact [email protected].
Ready to talk to Merion?
Whether you have accounts to recover or a question about a notice, the first conversation is always obligation-free.