Sub-processors

We use these providers under data processing agreements. Each receives only the data it needs:

• Neon (UK, London, on AWS): Database.
• Amazon Web Services (UK, London): Storage of uploaded files.
• Vercel: Application hosting (London), background jobs and AI Gateway routing.
• OpenAI, via Vercel AI Gateway (EU inference, zero data retention): Generating answers and search embeddings.
• Upstash (UK, London): Short-lived rate-limit counters and caches, holding hashed network addresses only.
• Resend (EU sending region): Email delivery, such as sign-in links, alerts and answers to visitors.
• Stripe: Subscription billing and payment processing.
• Sentry: Error monitoring, configured to remove message content, email addresses and phone numbers.
• Google: Optional sign-in with Google.

We will give businesses at least 30 days' notice by email before adding or replacing a sub-processor that handles visitor data. A business that objects on reasonable data protection grounds can cancel, as set out in our Data Processing Agreement.

Read the Data Processing Agreement

Data is stored in the UK (London) and answers are generated in the European Union, which the UK recognises as adequate. Transfers to the United States are covered by the UK-US data bridge or the UK International Data Transfer Addendum.

Read the Privacy Notice

Questions about our sub-processors: email hello@lynnalabs.com.