What is this page?
This page lists the sub-processors that Mapxus engages to provide its services. A sub-processor is a third-party vendor (or a Mapxus group affiliate) that processes Personal Data on Mapxus’s behalf in the course of operating the Mapxus indoor mapping and positioning platform.
This list is provided for transparency and to satisfy our obligations under applicable data-protection laws including the Singapore Personal Data Protection Act (PDPA), Hong Kong Personal Data (Privacy) Ordinance (PDPO), Japan Act on the Protection of Personal Information (APPI), Taiwan 個人資料保護法, and others as referenced in our Privacy Policy.
Each sub-processor below operates under a written agreement that includes data-protection commitments comparable to the Singapore PDPA standard, including security, confidentiality, breach notification, and audit cooperation.
How we update this list?
We may update the list of sub-processors as Mapxus’s services evolve. For Business Users on a paid subscription, we will provide at least 30 days’ prior notice of any material change to this list — by email and/or in-product notification — and Business Users may object to a new sub-processor within 30 days as set out in our Master Services Agreement.
1. External sub-processors
These are third-party vendors that process Personal Data on Mapxus’s behalf.
1.1 Cloud infrastructure and hosting
| Sub-processor |
Service provided |
Categories of data processed |
Region of processing |
Applicable to |
| Microsoft Corporation / Microsoft Operations Pte. Ltd. (Microsoft Azure) |
Cloud hosting and compute infrastructure |
All categories of Personal Data described in the Privacy Policy |
Azure Southeast Asia (Singapore, primary) and Azure East Asia (Hong Kong, backup) for global services; Azure Japan East / Japan West for Japan-market services |
All Mapxus products |
| Microsoft Corporation (Azure Front Door) |
Content delivery network for web-based SDKs |
IP addresses, request metadata, browser headers |
Global edge network (CDN edges; cached content does not contain Personal Data beyond IP-level metadata) |
Mapxus Anywhere; Web-based SDKs (CoreSDK, AuthSDK, VisualMapSDK, WebPDRSDK). Not used for map tiles or positioning SDK pipeline. |
1.2 Communications and productivity
| Sub-processor |
Service provided |
Categories of data processed |
Region of processing |
Applicable to |
Microsoft Corporation
(Microsoft 365, Outlook, Exchange Online)
|
Business email, scheduling, collaboration |
Email addresses, names, communication contents |
Microsoft global infrastructure (primary regional data centres aligned to Mapxus operating regions) |
Mapxus internal; customer email correspondence |
1.3 Website analytics and product analytics
| Sub-processor |
Service provided |
Categories of data processed |
Region of processing |
Applicable to |
Google LLC
(Google Analytics 4)
|
Aggregated website-traffic analytics |
Pseudonymous browsing data (IP-anonymised), page-view metrics |
Google global infrastructure (anonymised IP at edge) |
Mapxus website analytics. Phased out, being replaced by Amplitude. |
Amplitude, Inc.
(Amplitude)
|
Product analytics for Mapxus consumer applications |
Pseudonymous event data; no IP addresses collected |
Amplitude US infrastructure |
Mapxus website and consumer apps |
1.4 Customer support and ticketing
| Sub-processor |
Service provided |
Categories of data processed |
Region of processing |
Applicable to |
Linear Orbit, Inc.
(Linear)
|
Issue tracking and support ticketing |
Customer support correspondence, user identifiers, technical issue context |
Linear US infrastructure |
Mapxus internal customer support workflow |
1.5 Application telemetry and crash reporting
| Sub-processor |
Service provided |
Categories of data processed |
Region of processing |
Applicable to |
Google LLC
(Firebase Crashlytics)
|
Mobile-app crash reporting and diagnostics |
Crash stack traces, device model and OS version, session metadata, Crashlytics-generated installation identifier |
Google Cloud infrastructure (primarily US) |
Mapxus-published consumer apps only (CityGeni). Not used in the Mapxus SDK provided to Business Users. |
2. Mapxus group affiliates
These are Mapxus group operating entities that may access Personal Data for support, operational, billing, regulatory liaison, or group-coordination purposes, under the Mapxus Group Intra-Group Data Transfer Agreement (executed 2026-04-30).
| Mapxus group entity |
Role |
Region |
Applicable to |
Mapxus Technology Pte. Limited
(Singapore, UEN 202024637M)
|
Central Data Controller and Central Data Exporter |
Singapore |
All Mapxus services other than Japan-market services |
|
Maphive Technology Limited (Hong Kong)
|
Processor on behalf of Mapxus SG for Hong Kong customer support and billing |
Hong Kong |
Hong Kong customers and operations |
|
台灣蜂圖誌科技有限公司 (Taiwan Mapxus Technology Co., Ltd.) (Taiwan)
|
Processor on behalf of Mapxus SG for Taiwan |
Taiwan |
Taiwan customers and operations |
|
株式会社マップサス・テクノロジー・ジャパン (Mapxus Technology Japan K.K.) (Japan)
|
Independent Controller for Japan-market services; receives group-coordination data from Mapxus SG |
Japan |
Japan-market services (subject to the separate Mapxus Japan Privacy Policy) |
The intellectual property holding company Mapxus Technology Holding Limited (BVI) is a member of the Mapxus group as the licensor of the Mapxus technology and brand. It does not process Personal Data and is not a sub-processor.
3. Cross-border data transfers
Where Personal Data is transferred between regions or to a sub-processor outside Singapore, Mapxus implements the safeguards required under the Singapore PDPA Section 26 and equivalent provisions under HK PDPO, Japan APPI Article 28, and Taiwan 個資法 Article 21. These safeguards are described in our Privacy Policy Section 8 and are implemented through:
- Mapxus Group Intra-Group Data Transfer Agreement for transfers between Mapxus group entities
- Standard Contractual Clauses or equivalent contractual safeguards with each external sub-processor
- The Microsoft Online Services Data Protection Addendum with Microsoft Corporation
- Google Cloud Data Processing and Security Terms with Google LLC
- Amplitude Data Processing Addendum with Amplitude, Inc.
- Linear Data Processing Addendum with Linear Orbit, Inc.
A copy of the relevant transfer instrument is available on request from info@mapxus.com.
4. Removed or replaced sub-processors
Sub-processors that have been removed from this list since the previous version are noted here for transparency.
(No removals at this time — this is the initial publication.)
5. Categories of Personal Data
Each sub-processor only processes the specific categories of Personal Data necessary for the service it provides. The full categories of Personal Data Mapxus collects are described in the Privacy Policy Section 4. Sub-processors do not receive Personal Data outside the scope necessary for their service.
6. Questions or concerns
For any question about this list, including specific sub-processor agreements, request for copies of contractual safeguards, or notification preferences:
Contact: info@mapxus.com Mapxus group privacy contact: Mapxus Technology Pte. Limited, 10 Anson Road #11-20, International Plaza, Singapore 079903
To object to a new sub-processor (Business Users on paid subscription), contact info@mapxus.com within 30 days of receiving notification of the change.
Version 1.0 — published 2026-05-08. Mapxus reviews this list at least quarterly and updates it as services change. Last reviewed: 2026-05-08
