The third parties we engage to run Lumenbase, and where each one processes data.
Infrastructure
Always active as part of the core service.
| Provider | Purpose | Processing region |
|---|---|---|
| Supabase | Database, authentication, file storage | EU (Ireland) |
| Railway | Application hosting | EU (Netherlands) and Singapore |
| Stripe | Payments and billing | Global (US and EU) |
| Resend | Transactional and marketing email | US |
| Sentry | Error monitoring | EU (Germany) |
| PostHog | Product analytics | EU |
| Google (Tag Manager, Analytics) | Website analytics | Global |
AI and enrichment
Active when a workspace uses AI features.
| Provider | Purpose | Processing region |
|---|---|---|
| Mistral AI | AI language models | EU (France) |
| Speechmatics | Speech-to-text | EU |
| Anthropic | AI language models | US |
| Serper | Web search | US |
| TypeSafe AI (JEV) | Spam screening of form entries, and Lumo Quick read when turned on | US |
Changes to this list
We give reasonable advance notice before a new subprocessor starts processing your data, and you may object on data-protection grounds. See section 11 of the Data Processing Agreement.
Questions: security@lumenbase.io
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.