Legal

Subprocessors

A subprocessor is a third party Lunen engages to process customer data on our behalf. This page lists the subprocessors we use to deliver the Lunen service, what each one does for us, and where it processes data.

Last updated September 14, 2026

Infrastructure

Hosts the Lunen service and stores customer data.

  • Amazon Web Services

    Amazon Web Services, Inc.

    Cloud hosting for the application, its PostgreSQL database, uploaded files, logs, and backups. The primary region is Montréal; encrypted backups replicate to Calgary and stay in Canada.

    Location · Canada

Identity and secrets

Signs users in and holds the credentials the service uses on their behalf.

  • WorkOS

    WorkOS, Inc.

    Authentication, SSO and tenancy.

    Location · United States

Monitoring

Tells us when the service breaks.

  • Sentry

    Functional Software, Inc.

    Error and performance monitoring for the application.

    Location · United States

AI model providers

Lunen sends prompts and their context to a model provider only after an organization administrator enables that provider with the organization's own API key. Only the providers your organization enables receive its data, and your organization's contract with the provider governs how it is used. Organizations that route models through their own LiteLLM proxy send model traffic to that proxy instead.

  • OpenAI

    OpenAI, LLC

    Model inference for agents and conversations.

    Location · United States

  • Anthropic

    Anthropic, PBC

    Model inference for agents and conversations.

    Location · United States

  • Google

    Google LLC (Gemini API)

    Model inference for agents and conversations.

    Location · United States

Website and sales tools

These process data about visitors to www.lunen.ai and people who contact us. They never receive customer content from the Lunen application.

  • Website usage analytics.

    Location · United States

  • HubSpot

    HubSpot, Inc.

    Website visitor tracking, the early-access and contact-sales forms, and customer relationship management.

    Location · United States

  • Apollo.io

    ZenLeads, Inc.

    Website visitor identification for sales outreach.

    Location · United States

  • Termly

    Termly LLC

    Cookie consent management on the website.

    Location · United States

Connected services are not subprocessors

When your organization connects a third-party service to Lunen through MCP, such as Slack, GitHub, Google Workspace, or Atlassian, Lunen sends data to that service only when a user, or an agent acting under your organization's policy, directs it to. The service handles that data under your agreement with it, not as a Lunen subprocessor.