To support the delivery of our AI orchestration services, Kevin Luma, LLC (the "Provider") may engage and use data processors with access to certain Customer Data (each, a "Sub-processor").
1. Infrastructure Sub-processors
We rely on these core infrastructure providers to host our application, manage our database clusters, and provide global network delivery.
| Entity Name | Activity | Location |
|---|---|---|
| Vercel Inc. | Frontend Hosting and Edge Compute | United States |
| Supabase, Inc. | Database Hosting and Authentication | United States |
| Amazon Web Services (AWS) | Cloud Infrastructure & Storage | United States / EEA |
2. Functional Sub-processors
These entities provide specialized services that enable our core platform features, including AI inference, messaging, and analytical processing.
| Entity Name | Activity | Location |
|---|---|---|
| Anthropic PBC | LLM Inference Services | United States |
| OpenAI, Inc. | LLM Inference Services | United States |
| Auth0 (Okta, Inc.) | Identity Management and SSO Orchestration | United States |
| Pipedream, Inc. | Serverless Workflow and Integration Orchestration | United States |
| Tavily, Inc. | Web Search and Content Extraction API | United States |
| OpenRouter, Inc. | LLM Inference Routing and Multi-Provider Gateway | United States |
3. Identity Providers (Auth0)
When users authenticate via Auth0 using third-party social or enterprise credentials, the following entities may process limited profile data (email, name) to facilitate secure access.
| Entity Name | Activity | Location |
|---|---|---|
| Google LLC | Social / Enterprise Login (OAuth) | Global |
| Microsoft Corporation | Social / Enterprise Login (OIDC/SAML) | Global |
| GitHub, Inc. | Social Login (OAuth) | United States |
| LinkedIn Corporation | Social Login (OAuth) | United States |
4. Notification of New Sub-processors
Subscribers can sign up to receive notifications of new Sub-processors by emailing legal@kevinluma.ai with the subject "Sub-processor Notification Request".
In the event of an objection to a new Sub-processor, Provider will use reasonable efforts to make available a change in the services or recommend a commercially reasonable change to Customer’s configuration or use of the services to avoid processing of Lead Data by the objected-to new Sub-processor.