Every third party that processes Customer data on our behalf. We notify all active accounts at least 30 days before adding a new sub-processor.
| Sub-processor | Purpose | Location |
|---|---|---|
| Cloudflare | DNS, CDN, WAF, edge compute (Workers/Pages) for the marketing site, OAuth callback, and MCP backend | Global edge |
| Neon | Managed Postgres (token vault + application DB) | EU |
| Stripe | Billing and payment processing | US (with EU data residency) |
| Postmark | Transactional email (signup, license delivery, billing) | EU |
| Microsoft | Calendar + booking page (Microsoft 365 Outlook + Microsoft Bookings) for prospect intros and team email infrastructure | EU/UK |
| Anthropic | Claude processes user prompts and tool-call responses in-session. Amazon-derived data passes through Claude during a request and is not retained for training. | US |
Subscribe to change notifications by emailing privacy@lumitec.ai with the subject line subscribe: sub-processors. You will receive at least 30 days' notice of any addition.