Lumenarc sub-processors
Version 1.0 · Last updated 6 November 2026
Response IQ Ltd, trading as Lumenarc ("Lumenarc"), uses the third parties below to process personal data when we provide the Lumenarc services. This page is Annex 3 of our Data Processing Agreement.
Changes. We email the account owner of every customer at least 30 days before we add or replace a sub-processor, and update this page. A customer can object during that period, as set out in the Data Processing Agreement.
Providers' own use. Some providers may, under their own terms, keep data they process for us and use it to improve their own models. Our transcription provider, Deepgram, does this. Each provider's privacy information is available from its website.
Transfer safeguards. Where data leaves the UK for a country without UK adequacy regulations, the safeguard is the UK Addendum to the EU Standard Contractual Clauses (SCCs) in the provider's data processing terms, or the UK Extension to the EU-US Data Privacy Framework (DPF) where the provider is certified. "SCCs + UK Addendum" below means the first; "DPF (UK Extension)" means the second, with SCCs as a fallback where the provider's terms include them.
Hosting and infrastructure
| Sub-processor | What they do for us | Location | Transfer safeguard |
|---|---|---|---|
| Google Cloud (Google Cloud EMEA Ltd) | Application servers, task queues, secret storage, storage of call recordings and files | Servers in London, Belgium and Israel, each call served from the nearest | UK and EEA: none needed. Israel: UK adequacy regulations |
| Supabase Inc. | Main database and file storage | London (eu-west-2) | None needed for storage; SCCs + UK Addendum for support access |
| Vercel Inc. | Hosting of the Demo and Studio web apps, file storage, site performance analytics | United States and Vercel's global network | SCCs + UK Addendum |
| Upstash Inc. (Vercel KV) | Short-lived cache for the Demo app | United States and other regions | DPF (UK Extension) |
| Cloudflare Inc. | DNS, network delivery and security; internal deployment tooling | Global network | SCCs + UK Addendum, or DPF (UK Extension) |
AI, voice and transcription
| Sub-processor | What they do for us | Location | Transfer safeguard |
|---|---|---|---|
| Google (Gemini API and Vertex AI) | Real-time voice conversations and language models | Vertex AI: United States (us-central1) for calls served from London; EU for calls served from Belgium and Israel. Gemini API: Google's global infrastructure | SCCs + UK Addendum (Google's data processing terms) |
| OpenAI OpCo, LLC | Language models for call supervision, summaries, follow-up drafting, company research and image checks | United States | SCCs + UK Addendum |
| Anthropic | Language models used when building demos | United States | SCCs + UK Addendum |
| xAI (X.AI LLC) | Real-time voice and language models | United States | SCCs + UK Addendum |
| Cerebras Systems Inc. | Fast language models used when authoring and testing demos | United States | SCCs + UK Addendum, or DPF (UK Extension) |
| OpenRouter, Inc. | Routing to language models used in public-information checks | United States | SCCs + UK Addendum |
| Deepgram Inc. | Transcribing call recordings | United States | SCCs + UK Addendum |
| ElevenLabs | Text-to-speech voices | United States | SCCs + UK Addendum |
| Daily, Co. | Real-time audio transport for calls | United States | SCCs + UK Addendum |
Research, observability and business tools
| Sub-processor | What they do for us | Location | Transfer safeguard |
|---|---|---|---|
| Firecrawl (SideGuide Technologies, Inc.) | Reading public web pages and web search, to research the prospect's company | United States | SCCs + UK Addendum, or DPF (UK Extension) |
| Jina AI GmbH (part of Elastic) | Backup reader for public web pages | Germany and the United States | SCCs + UK Addendum (Elastic's data processing terms) |
| Browserbase, Inc. | Cloud browsers that capture customers' websites and products for demos | United States | SCCs + UK Addendum, or DPF (UK Extension) |
| Axiom Inc. | Service logs and call diagnostics | United States | SCCs + UK Addendum |
| PostHog Inc. | Product analytics and session replay | EU (Frankfurt) | None needed |
| Functional Software, Inc. (Sentry) | Error monitoring | United States | DPF (UK Extension) |
| Langfuse GmbH | Tracing of AI model calls | EU (Langfuse EU Cloud) | None needed |
| Clerk, Inc. | Sign-in and user accounts for customer users | United States | DPF (UK Extension), with SCCs + UK Addendum |
| Resend (Plus Five Five, Inc.) | Service emails, such as demo links, summaries and verification | United States | DPF (UK Extension) |
| HubSpot | Lumenarc's own CRM, which holds prospect and customer contacts | Per HubSpot account region | SCCs + UK Addendum, or DPF (UK Extension) |
| Stripe | Billing and payments | United States and other regions | SCCs + UK Addendum, or DPF (UK Extension) |
Integrations you choose
These are not our sub-processors. You connect them and they act for you, under your own contract with them: HubSpot, Salesforce, Pipedrive and Slack (as your own accounts), and Google or LinkedIn sign-in.