Sub-processors
Last reviewed: 28 July 2026
PanLuma engages the third parties below to operate the platform. Each is bound by a Data Processing Agreement (DPA) and uses appropriate technical and organisational measures to protect customer data.
This list is reviewed annually and updated whenever a sub-processor is added, replaced, or removed. This page is the published form of our version-controlled sub-processor list, which records the full data categories and DPA reference for each entry.
Material additions are communicated to customers in advance per their DPA.
Always-on sub-processors (required for platform operation)
| Sub-processor | Purpose | Region |
|---|---|---|
| Amazon Web Services | Hosting infrastructure: application, database, cache, object storage, CDN/WAF, secrets, logs, DNS. | us-east-1 (N. Virginia) |
| Anthropic (Claude) | LLM provider for in-app AI assistants, AI agents, AI Chat, AI evaluation, and coding tasks. Does not train on API customer data. | United States, EU SCCs |
| Twilio / SendGrid | Transactional email (notifications, password resets, customer-portal invites, support replies). | United States, EU SCCs |
| MaxMind (GeoLite2) | IP-to-geolocation lookup via a local database. No live API calls. | Local processing only |
| Stripe | Payment processing for your own PanLuma subscription and usage billing. Card details are entered directly into Stripe’s hosted fields. | United States, EU SCCs |
User-initiated integrations
These sub-processors receive customer data only when a customer explicitly connects the integration in their workspace, by granting OAuth access or entering an API key. Disconnecting revokes the grant.
| Sub-processor | Purpose | Region |
|---|---|---|
| Gmail, Drive, Sheets, Docs, Calendar, Maps, Google SSO. Also Google Ads lead forms and offline conversion import for marketing. | United States, EU SCCs | |
| Microsoft | Microsoft SSO, Outlook Mail, Outlook Calendar, OneDrive, Excel. | Multi-region, EU SCCs |
| Apple | Sign in with Apple (SSO), including the optional private email relay. | United States, EU SCCs |
| Notion | Notion workspace access for the connecting user. | United States, EU SCCs |
| Meta | Meta Lead Ads and WhatsApp Business inbound messages become leads and contacts; Meta Conversions API sends server-side conversion events. | United States / Ireland, EU SCCs |
| Stripe | Card payment collection from your customers via Stripe Connect, settling to your own Stripe account. Separate from the always-on entry above, which is your own PanLuma bill. | United States, EU SCCs |
| Plaid | Bank-feed aggregation for the accounting module (balances, transactions, account metadata). | United States, EU SCCs |
| Mercury | Direct bank-feed sync for Mercury accounts in the accounting module. | United States |
| Shopify | Two-way commerce sync: product catalogue, stock levels, orders imported as sales orders, shoppers imported as contacts. | Canada / United States, EU SCCs |
| Ocean carriers (DCSA Track & Trace) | Direct-from-carrier container milestone tracking for the shipments module. Each carrier is bound by your own contract with that carrier. | Carrier-dependent (global) |
| OpenAI | Alternative LLM provider — only when the tenant supplies their own API key. | United States, EU SCCs |
| Google Gemini API | Alternative LLM provider — only when the tenant supplies their own API key. | United States, EU SCCs |
| Morning (Green Invoice) | Statutory Israeli tax invoicing — only when the tenant supplies their own API key. Receives the invoice or receipt pushed for issuance. | Israel |
Supporting sub-processors
| Sub-processor | Purpose | Region |
|---|---|---|
| PostHog | Product analytics for the application (opt-out available per tenant). | EU (Frankfurt) |
| Plausible | Privacy-first, cookie-free analytics for the marketing site only. | EU (Germany) |
| Serper.dev | Web search service used by AI agents. | United States, EU SCCs |
| ShipsGo | Default ocean-container tracking provider. Receives container and booking references. | Italy / EU |
| Terminal49 | Alternative ocean-container tracking provider. Receives container and booking references. | United States |
| OpenRouter | AI model pricing reference data. No customer data sent. | United States |
| Simli | Avatar video generation for the avatar feature. | United States, EU SCCs |
| Deepgram | Speech-to-text for avatar / voice features. | United States, EU SCCs |
| Cartesia | Text-to-speech for avatar / voice features. | United States, EU SCCs |
| E2B | Code-execution sandboxes for the coding module and certain agent tools. | United States, EU SCCs |
| Yahoo Finance | Public financial data. No customer data sent. | United States |
| GitHub | Source-code hosting for PanLuma’s own engineering. No customer data flows at runtime. | United States, EU SCCs |
Pending sub-processors (not yet active)
The integrations below are not yet in service: either the connector is still marked as coming soon in our catalogue, or it has shipped but is not provisioned in our production environment. They do not currently process any customer data, and each will be promoted to the lists above — with advance notice per your DPA — when it goes live: Slack, GitHub (as a user-facing integration, distinct from source-code hosting above), Jira, Salesforce, HubSpot, QuickBooks, Zendesk, E2open / INTTRA (ocean-carrier booking, shipping-instruction and VGM messaging), FullEnrich (business-email finding for prospecting, and LinkedIn profile lookup for recruiting candidate import), and ZeroBounce (email-deliverability verification for prospecting).
Questions
For sub-processor questions or to request our customer DPA, email privacy@panluma.ai.