OneXnect Subprocessors
Last updated: November 6, 2026
OneXnect, a product of Mfini Inc., uses the companies below to provide the Service. Each receives only what it needs for its part, under a written agreement that requires it to protect the data. How we handle data is in the Privacy Policy.
| Company | What it does for OneXnect | What it receives | Where |
|---|---|---|---|
| Composio, Inc. | Connections to services with APIs: the OAuth sign-in, and running tool calls on them | End Users' sign-in tokens for those services (Composio holds them); the tool calls sent and what the services return | United States |
| Browserbase, Inc. | The remote browsers used to sign in to websites and to browse them | The pages visited, the website session loaded into the browser, and what an End User types on the sign-in page | United States (Oregon) |
| Render Services, Inc. | Hosting for the API, the scheduled worker and the database | All data OneXnect keeps; credentials and sessions are encrypted before they are stored | United States (Oregon) |
| Cloudflare, Inc. | The network in front of Render's hosting | Traffic in transit | Global |
| Vercel Inc. | Hosting for the website and the dashboard | Page requests; dashboard sessions in transit | United States and global edge |
| Clerk, Inc. | Sign-in for the dashboard | Dashboard staff's names, email addresses and sign-in methods | United States |
| Twilio Inc. (SendGrid) | Email: team invitations and account alerts | Staff email addresses and the message | United States |
| Stripe, Inc. | Saving the payment card and taking payments | Billing contact and address, the card (held by Stripe; we never see the number), the amounts charged | United States |
| ZipTax | Sales-tax rates | A billing address only | United States |
| Google LLC (Google Workspace) | Our own email, including support@onexnect.com | What people email us | United States |
Not subprocessors: the services an End User connects, such as Gmail, a website or an MCP server. They are the End User's own accounts, reached on their instruction under those services' own terms.
Changes. We update this page before a new subprocessor starts handling Customer Data, and email account owners at least 30 days before. If you object on reasonable data-protection grounds, tell us within that time; if we can't resolve it, you may close your account, and any fees paid in advance for the time after the change are refunded.
Questions: support@onexnect.com.