Lepsta Sub-processors
Last Updated: 4 June 2026
Lepsta (“we,” “our,” or “us”) engages the third-party sub-processors listed below to help deliver our services. Each sub-processor is bound by a data-processing agreement and processes personal data only on our instructions, under the safeguards described in our Privacy Policy. Where data is transferred internationally, transfers are protected by Standard Contractual Clauses (SCCs), the UK Addendum to the SCCs, or an applicable adequacy decision.
1. Current Sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| DigitalOcean | Cloud hosting and managed infrastructure | All platform data (primary hosting) | UK & EU |
| Cloudflare | CDN, DNS, and DDoS protection | Traffic metadata, cached content | Global (edge network) |
| Amazon Web Services | Object storage for media and file attachments | Uploaded files and attachments | UK |
| Resend | Transactional email delivery | Name, email address, notification content | EU |
| Ably | Realtime messaging infrastructure | Workspace event payloads in transit | EU / US |
| PostHog | Product analytics | User identifiers (name, email), usage events | EU |
| OpenAI | LLM inference for AI features | Text prompts submitted to AI features | US |
| IBM (watsonx) | LLM inference for AI features | Text prompts submitted to AI features | EU / US |
| Anthropic | LLM inference for AI features (fallback provider) | Text prompts submitted to AI features | US |
LLM providers process only the text prompts you submit, solely for inference. Prompts are not used for advertising, and no unrelated personal data is shared.
2. Independent Processors
Payments are handled by Stripe through Stripe-hosted checkout pages. Your payment card details are submitted directly to Stripe and never pass through or are stored on Lepsta's systems. Stripe acts as an independent processor of payment data under its own privacy policy, not as a Lepsta sub-processor.
3. Third-Party Integrations
Services you choose to connect to Lepsta — such as Google, Microsoft, GitHub, Jira, Trello, Freshdesk, or Asana — are not sub-processors. They are independent services and act as independent data controllers of their own platforms. You may revoke their access at any time via Lepsta or the third-party platform. See Section 5 of our Privacy Policy for details.
4. Changes to This List
We will update this page when we add or replace a sub-processor and notify customers of material changes.
5. Contact Us
If you have questions about our sub-processors or data handling, contact us at:
Lepsta Email: [email protected]