Subprocessors
Last updated: December 2025
We use third-party services (subprocessors) to provide, maintain, and improve Lev. This page lists all subprocessors that may process customer data, what they do, and what data they access.
This list includes all third parties that process customer data on our behalf. We maintain
contracts with these providers that include appropriate data protection terms.
Infrastructure & Core Services
These providers host our platform and core functionality:
AWSAmazon Web Services — Cloud infrastructure (compute, storage, database, networking). All customer data (encrypted). US (us-east-1, us-west-1).
MongoDB AtlasEmail service database — Email metadata, message content. US.
SupabaseFile storage — Documents, file uploads. US.
RedisCaching layer — Session data, temporary cache. US.
VercelFrontend hosting — Static assets. US.
Authentication
Auth0Authentication, SSO, MFA — User identity, login events, email. US.
AI / LLM Providers
These providers power our AI features:
OpenAIDocument extraction, embeddings, note generation — Document content, email text, prompts. US.
AnthropicComplex reasoning, document analysis — Document content, prompts. US.
Google GeminiDocument processing — Document content, prompts. US.
Chunkr AIDocument layout analysis — Document content. US.
Note: All AI providers are configured so that customer data is not used for model training.
Email Integration
NylasEmail API middleware (OAuth, sync) — OAuth tokens (stored by Nylas), email headers, email content. US.
Monitoring & Operations
These providers help us maintain system health and debug issues:
DatadogApplication monitoring, logging, APM — Logs, metrics, traces (may include PII in error contexts). US.
SentryError tracking — Error data, stack traces (may include PII in error contexts). US.
DopplerSecrets management — API keys, credentials (internal only). US.
Analytics & Product Intelligence
These providers help us understand product usage:
PostHogProduct analytics — User behavior, events, feature usage. US.
SegmentAnalytics pipeline — User events, identifiers. US.
HubSpotMarketing CRM — Contact information, engagement data. US.
Communication
Google WorkspaceInternal email, collaboration — Customer communications via support. US.
SlackInternal alerting — Error notifications (may include customer context). US.
Changes to This List
We may update this list as we add or remove subprocessors. Material changes will be communicated to customers.
To be notified of changes: Contact trust@lev.com to be added to our subprocessor notification list.