Sub-Processor Disclosure

Sub-Processor Disclosure

Overview

Tiny Mammoth (dba Review Engine) uses a limited number of trusted third-party vendors (“Sub-Processors”) to help deliver the Services described in the Review Engine Terms of Service.
Each Sub-Processor performs specific, clearly defined functions such as hosting, data transmission, or secure payment processing.
Every Sub-Processor is contractually bound to maintain data-protection, security, and confidentiality obligations at least as strong as those required of Review Engine.

How We Select and Manage Sub-Processors

Before engaging any Sub-Processor, we:

1. Review Security Controls – confirm SOC 2, ISO 27001, or equivalent compliance, or that the provider operates under HIPAA/GDPR-aligned standards.
   
2. Execute Written Agreements – require confidentiality, data-processing, and breach-notification clauses.
   
3. Monitor and Audit – periodically review each provider’s certifications or public audit reports.
   

Current Categories of Sub-Processors

Category

Purpose

Example Providers*

Cloud Infrastructure & Hosting

Stores and processes application data in secure data centers

Amazon Web Services (AWS)

CRM & Automation Platform

Workflow, contact, and communication management

GoHighLevel (GHL)

Messaging & Voice Delivery

Sends SMS, MMS, and voice communications

Twilio / TextGrid

Payment & Accounting

Billing, invoicing, and subscription management

Stripe / QuickBooks

Analytics & Integrations

Website and product analytics, API connectivity

Google Analytics / Google Cloud

Support & Productivity Tools

Internal ticketing and collaboration

ClickUp / Typeform / Slack

*These names illustrate primary providers currently used. The specific vendors or equivalents may change over time as our infrastructure evolves.

Updates to This List

We may update this Sub-Processor Disclosure periodically to reflect new or replacement vendors.
When we make a material change, we will update this page and may notify active Clients via email or within the Review Engine dashboard.

Continued use of the Services after such notice constitutes acceptance of the updated list.

Contact

Questions regarding Sub-Processors or data-protection practices may be sent to:
support@review-engine.com