Amazon Web Services, Inc.
- Purpose
- Cloud object storage for customer documents
- Data processed
- Customer documents and derived files
- Location
- United States
Subprocessors
Effective date: September 1, 2026
LightTable uses the following subprocessors — third-party service providers that process customer data on our behalf — to deliver our services. Before engaging any subprocessor, we evaluate its security and data-protection practices. We will update this page when we add or replace a subprocessor.
Supabase, Inc.
- Purpose
- Managed database hosting
- Data processed
- Application data, including analysis results and project data
- Location
- United States
Modal Labs, Inc.
- Purpose
- Document-processing compute
- Data processed
- Customer documents and derived files during analysis. LightTable deletes its working files when a job completes; Modal retains function inputs and outputs for up to 7 days.
- Location
- United States
Railway Corp.
- Purpose
- Application hosting
- Data processed
- All application traffic
- Location
- United States
Anthropic, PBC
- Purpose
- AI document analysis
- Data processed
- Document content submitted for analysis
- Location
- United States
OpenAI, LLC
- Purpose
- AI document analysis
- Data processed
- Document content submitted for analysis
- Location
- United States
Google LLC
- Purpose
- AI document analysis; AI model hosting (Vertex AI)
- Data processed
- Document content submitted for analysis
- Location
- United States
Microsoft Corporation
- Purpose
- AI model hosting (Azure OpenAI)
- Data processed
- Document content submitted for analysis
- Location
- United States
OpenRouter, Inc.
- Purpose
- AI model routing (failover for direct model providers)
- Data processed
- Document content submitted for analysis, when failover is active
- Location
- United States
Clerk, Inc.
- Purpose
- User authentication and identity
- Data processed
- User names, email addresses, authentication data
- Location
- United States
Twilio Inc. (SendGrid)
- Purpose
- Transactional email delivery
- Data processed
- Recipient email addresses, notification content
- Location
- United States
Pydantic Services Inc. (Logfire)
- Purpose
- Application logging and monitoring
- Data processed
- Operational logs and traces
- Location
- United States
Grafana Labs
- Purpose
- Application monitoring
- Data processed
- Operational traces and error logs
- Location
- United States
PostHog, Inc.
- Purpose
- Product analytics
- Data processed
- Usage data and user identifiers
- Location
- United States
GitHub, Inc.
- Purpose
- Source code hosting and CI/CD; scheduled quality-analysis jobs
- Data processed
- Sampled operational notes and metadata generated during document processing, read from production for quality analysis; no customer documents
- Location
- United States
Slack Technologies, LLC
- Purpose
- Internal engineering alerts and notifications
- Data processed
- Operational alerts and automated summaries, which may include excerpts of document-processing notes
- Location
- United States
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud object storage for customer documents | Customer documents and derived files | United States |
| Supabase, Inc. | Managed database hosting | Application data, including analysis results and project data | United States |
| Modal Labs, Inc. | Document-processing compute | Customer documents and derived files during analysis. LightTable deletes its working files when a job completes; Modal retains function inputs and outputs for up to 7 days. | United States |
| Railway Corp. | Application hosting | All application traffic | United States |
| Anthropic, PBC | AI document analysis | Document content submitted for analysis | United States |
| OpenAI, LLC | AI document analysis | Document content submitted for analysis | United States |
| Google LLC | AI document analysis; AI model hosting (Vertex AI) | Document content submitted for analysis | United States |
| Microsoft Corporation | AI model hosting (Azure OpenAI) | Document content submitted for analysis | United States |
| OpenRouter, Inc. | AI model routing (failover for direct model providers) | Document content submitted for analysis, when failover is active | United States |
| Clerk, Inc. | User authentication and identity | User names, email addresses, authentication data | United States |
| Twilio Inc. (SendGrid) | Transactional email delivery | Recipient email addresses, notification content | United States |
| Pydantic Services Inc. (Logfire) | Application logging and monitoring | Operational logs and traces | United States |
| Grafana Labs | Application monitoring | Operational traces and error logs | United States |
| PostHog, Inc. | Product analytics | Usage data and user identifiers | United States |
| GitHub, Inc. | Source code hosting and CI/CD; scheduled quality-analysis jobs | Sampled operational notes and metadata generated during document processing, read from production for quality analysis; no customer documents | United States |
| Slack Technologies, LLC | Internal engineering alerts and notifications | Operational alerts and automated summaries, which may include excerpts of document-processing notes | United States |
Third-party integrations that customers choose to connect (Procore, Bluebeam, Revizto) exchange data at the customer's direction under the customer's own agreements with those providers, and are not subprocessors.