Every third party that processes Customer data on our behalf. We notify all active accounts at least 30 days before adding a new sub-processor.
| Sub-processor | Purpose | Location |
|---|---|---|
| Fly.io | Application hosting and MCP backend | UK / EU |
| Neon | Managed Postgres (token vault + application DB) | EU |
| Cloudflare | DNS, CDN, WAF for the marketing site and OAuth callback | Global edge |
| Stripe | Billing and payment processing | US (with EU data residency) |
| Sentry | Error monitoring (PII scrubbed before ingest) | EU |
| Postmark | Transactional email (signup, license delivery, billing) | EU |
| Anthropic | Claude processes user prompts and tool-call responses in-session. Amazon-derived data passes through Claude during a request and is not retained for training. | US |
Subscribe to change notifications by emailing privacy@lumitec.ai with the subject line subscribe: sub-processors. You will receive at least 30 days' notice of any addition.