Shopify
Purpose: installation, authentication, Admin API, app proxy, theme delivery, plan status and platform services. Location: global infrastructure under Shopify’s published terms.
Google Cloud
Purpose: application hosting, managed database, backups, secrets, logs and monitoring. Processing locations: configured service regions and Google’s global support and security infrastructure.
Cloudflare
Purpose: DNS, TLS, edge security and controlled owner access where enabled. Location: global edge network under Cloudflare’s terms.
Updates
We update this list before materially changing processors of merchant personal data and give notice required by the DPA. Questions or objections: matthew@marvellogroup.co.uk.