To provide the Lexly service, we engage trusted third-party companies ("subprocessors") to process certain data on our behalf. Each is bound by contractual confidentiality and data-protection obligations. This page lists our current subprocessors; it supports our Privacy Policy.
Current Subprocessors
| Provider | Purpose | Data processed | Primary region |
|---|---|---|---|
| Supabase | Database & authentication | Account data, app data, hashed credentials | Mumbai, India (ap-south-1) |
| Amazon Web Services (S3) | Encrypted document storage | Contract files (PDFs) | Mumbai, India (ap-south-1) |
| Vercel | Application hosting & delivery | Request data, logs, IP addresses | Global edge / US (iad1) |
| Lemon Squeezy | Payments (Merchant of Record) & invoicing | Billing & subscription data, customer identifiers | United States |
| Google (Gemini API) | AI contract generation & analysis | Document text and prompts you submit | United States |
| Mistral AI | OCR (text extraction from uploads) | Uploaded document content | European Union |
| Resend | Transactional & product email | Recipient email address, message content | United States |
| Upstash (Redis) | Rate limiting | IP addresses / user identifiers | Global / United States |
| PostHog | Product analytics | Usage events, device/technical data | United States |
| Sentry | Error & performance monitoring | Error diagnostics, technical data | United States |
We do not sell personal data. AI/OCR providers process your document content only to return a result to you; we do not use the substance of your contracts to train third-party foundation models.
International Transfers
Some subprocessors process data outside your country (including the United States, the European Union, and India). Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers out of the EEA/UK.
Changes to This List
We may update our subprocessors as the Service evolves. Material additions will be reflected here with an updated date.
Questions
Contact privacy@lexlyai.com for any questions about our subprocessors or to request our Data Processing Agreement (DPA), if applicable.