GDPR Data Processing Details

This article provides detailed information for authenticated Maxio customers about our data processing practices under GDPR, including specific sub-processors, third-party vendors, and integration partners.

Maxio Advanced Billing acts as a data processor on your behalf. While you, as the Merchant, manage consent and data governance, we ensure that the systems processing your customer data are secure, transparent, and compliant with applicable privacy laws.

Use this reference to complete privacy impact assessments (PIAs), prepare for audits, or respond to customer inquiries regarding personal data handling.

Our GDPR compliance commitments

• Safeguard your data through secure infrastructure, encryption, and access controls.
• Maintain certifications (e.g., EU-U.S. Privacy Shield or successors) to support cross-border data transfers.
• Disclose all sub-processors and conduct ongoing reviews of their GDPR compliance.
• Maintain detailed compliance records, audit trails, and system logs.
• Provide tools and workflows to support data subject rights (DSRs), such as right-to-access and right-to-erasure.
• Offer standardized Data Processing Addendums (DPAs) for all customers.
• Promptly notify your designated account contact in the event of a security breach, in accordance with our incident response protocols.

How to request a Data Processing Addendum (DPA)

Our standard Data Processing Addendum (DPA) is available for Advanced Billing customers. To request a copy, email support@maxio.com and our Legal team will respond within 3–5 business days.

Data processors

When a Merchant’s employee accesses the Advanced Billing system, we use various data processors. These do not receive personal information about subscribers or end-customers.

• Twilio
• Zoho
• Salesforce
• Segment
• Autopilot
• Mailchimp
• Zapier
• Zendesk

Sub-processors

These services may store or process personal data of your subscribers, depending on your configuration:

• Amazon Web Services
• SumoLogic
• SendGrid (if email is enabled)
• Avalara (if tax integration is enabled)
• Honeybadger
• Heroku
• Google Cloud

Third-party integration partners

Maxio provides optional integrations through APIs, built-in connectors, and webhooks. We do not evaluate the GDPR compliance of these third-party services. Merchants are responsible for conducting their own due diligence and ensuring appropriate data processing agreements are in place.

• Your chosen Gateway or Payment Processor
• Avalara
• Xero
• QuickBooks Online
• Salesforce
• Mailchimp
• Shopify
• Twilio