Loading SUBLAKELoading SUBLAKELast updated: July 21, 2026
To provide the SUBLAKE service, SUBLAKE Holdings LLC uses a small set of trusted third-party companies (“sub-processors”) that process personal data on our behalf. This page is the authoritative, current list. We keep it deliberately short and only use vendors that are contractually bound to protect your data.
A sub-processor is a company we engage to help deliver the service — for example, to host data, deliver phone calls and text messages, process payments, or power the AI that answers and drafts messages. Each sub-processor may only process personal data to perform the specific task we’ve engaged them for, under a data-protection agreement, and never for their own purposes. We do not sell your data, and your data is never used to train general-purpose AI models.
| Sub-processor | What they process for us | Location |
|---|---|---|
| Supabase, Inc. | Database and file storage hosting | United States |
| Vercel, Inc. | Website and application hosting / content delivery | United States |
| Railway Corp. | Application (backend) hosting | United States |
| Anthropic, PBC | AI processing — understanding messages and drafting responses | United States |
| Vapi, Inc. | Real-time voice call handling for the AI Receptionist | United States |
| Twilio Inc. | Telephony and SMS delivery (phone numbers, calls, texts) | United States |
| Stripe, Inc. | Payment processing and payouts | United States |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | United States |
| Loops (Loops Software, Inc.) | Product and lifecycle email | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring | United States |
| Google LLC | Calendar sync and sign-in — only when you connect a Google account — only if you connect it | United States |
| Meta Platforms, Inc. | WhatsApp, Instagram, and Messenger messaging — only when you connect those channels — only if you connect it | United States |
Some sub-processors receive data only when you choose to connect an optional integration (for example, calendar sync or a social messaging channel). Those are marked above.
Our sub-processors host and process data in the United States. Where a transfer of personal data leaves the EEA, UK, or Switzerland, we rely on the appropriate safeguards described in our Data Processing Agreement (including the EU Standard Contractual Clauses and the UK Addendum). We do not publish internal system details beyond what is necessary for this transparency.
We may add or replace a sub-processor as the service evolves. When we do, we update this page. Customers with a Data Processing Agreement in place may request advance notice of new sub-processors (generally at least 30 days) and may raise a reasonable objection, as described in the DPA.
Questions about our sub-processors or a data-processing agreement? Email us at contact@sublake.com. See also our Privacy Policy, GDPR page, and Data Processing Agreement.