Sub-processors
Last updated: 2026-09-10
Apliteni OÜ (registry code 14296961), the company operating Lessly, engages the third-party processors listed below ("sub-processors") to help provide the service. Each sub-processor operates under a data processing agreement and processes customer data only for the purpose stated. This list covers all Lessly products.
| Vendor | Role | Data processed | Region | Transfer safeguard |
|---|---|---|---|---|
| Google Cloud Platform | Hosting, compute, databases, object storage, secrets | All customer and end-user data processed by the platform | EU (europe-west4, Netherlands) | none (EU processing) |
| GitHub (Microsoft Ireland Operations Ltd) | Source-code connector, OAuth sign-in | Account identity (name, email), OAuth tokens, repository metadata | EU / global (Microsoft Ireland contracting entity) | DPF-certified (Microsoft) |
| Amazon Web Services (Amazon SES) | Transactional email delivery through Lessly Mail | Recipient email address, message content | EU (eu-north-1, Stockholm) | none (EU processing) |
| Axiom | Logs and traces | Request metadata (IP redacted at source) | EU (eu-central-1, Frankfurt) | none (EU processing) |
| Inngest | Workflow orchestration | Workflow event payloads (may include account identifiers) | US | SCCs (Art. 46 GDPR) |
| Anthropic PBC | LLM inference (Claude) for the natural-language analytics service — text-to-SQL and answer summarization | End-user analytics questions (free text, unredacted, may contain personal data) and query result rows. Result rows are person-level — one row per tracked profile, product end user (including waitlisted signups) or mail contact — and the queryable views carry normalised email and phone columns for person-graph identity resolution, so a result row may carry a direct identifier | US | SCCs (Art. 46 GDPR) |
Announced
The following sub-processors have been announced and will not begin processing customer data before the date shown.
| Vendor | Role | Data processed | Region | Transfer safeguard | Processing starts |
|---|---|---|---|---|---|
| Stripe | Payment processing (activates with billing) | Payment card (last4), billing name and email, Stripe customer id | EU / US | DPF-certified + SCCs (known US exception) | to be announced |
How we announce changes
We announce a new sub-processor on this page at least 30 days before it begins processing customer data. An announced sub-processor appears above with the date its processing is scheduled to start.
To be notified of changes to this page by email, write to privacy@lessly.com.