Effective: July 17, 2026
LEANSTACK, Inc. ("LEANSTACK") engages the third-party sub-processors listed below to help deliver LeanSpark. Each processes customer data only as needed to provide the service, under a data processing agreement. None of these providers use your Customer Data to train their own models.
AI data: Your prompts and canvas content are sent to our AI sub-processors for inference only. They are not used to train any model. AI processing is limited to commercial, paid-tier services from Anthropic and Google.
| Sub-processor | Purpose | Location |
|---|---|---|
| Anthropic | Large language model inference (Claude) powering AI coaching | United States |
| Google (Gemini API) | Text embeddings for retrieval and search | United States |
| Sub-processor | Purpose | Location |
|---|---|---|
| Render | Application hosting and managed PostgreSQL database | United States |
| Cloudflare | Content delivery, web application firewall, DDoS protection, and bot mitigation | Global edge network |
| Amazon Web Services (S3) | File and object storage for uploads | United States |
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and subscription management (card data tokenized by Stripe; never stored by LEANSTACK) | United States |
| Postmark | Transactional email delivery | United States |
| AppSignal | Application performance monitoring and error tracking | European Union |
These sub-processors are used only when the corresponding feature is used.
| Sub-processor | Purpose | Location |
|---|---|---|
| AssemblyAI | Audio transcription for user-uploaded pitch and customer-interview recordings | United States |
| Slack | Optional integration when a team connects its own Slack workspace | United States |
We may update this list as our services evolve. Questions about our sub-processors can be sent to security@leanstack.com.
© 2026 LEANSTACK, Inc. All rights reserved.