Last updated: August 2025
Luca uses the following third-party processors ("subprocessors") to deliver the service. Each processes personal data solely on our instructions and under a data processing agreement.
| Vendor (Legal Entity) | Service / Purpose | Data Types | Primary Processing Location | Transfer Mechanism |
|---|---|---|---|---|
| Render.com | Hosting & runtime | Account data, document metadata, logs | EU | SCCs + UK Addendum (if outside UK/EEA) |
| Postmark (ActiveCampaign, LLC) | Transactional email | Account/contact data; notifications | US | SCCs + UK Addendum |
| Datadog, Inc. | Logging & observability | Pseudonymised logs/metrics; IPs | US | SCCs + UK Addendum |
| Sentry (Functional Software, Inc.) | Error tracking | Application errors; limited metadata | EU | SCCs + UK Addendum |
| Stripe Payments Europe, Ltd. | Payments & billing | Billing details; payment tokens | EU (with global sub-processing) | Intra-group + SCCs |
| Auth0 (Okta, Inc.) | Identity & access | Auth identifiers; emails; tokens | UK | SCCs + UK Addendum |
| OpenAI | AI model inference (API) | Document excerpts/metadata as prompts; outputs | US | SCCs + UK Addendum |
| Redis (Managed/hosted) | Caching | Session and job metadata | EU | N/A or SCCs (provider-dependent) |
| Backblaze B2 Cloud Storage | File storage | Uploaded documents/attachments | EU | SCCs + UK Addendum |
| Intercom R&D Unlimited Company | Customer support & CRM | Contact data; support conversations | EU | SCCs + UK Addendum |
We'll post changes to this page and, for customers under our DPA, provide advance notice (typically 30 days) by email before adding or replacing a subprocessor, giving you an opportunity to object per the DPA.
Subscribe to updates: email hello@withluca.ai with subject "Subscribe: subprocessor updates".