Trust portal
Sign in
03Trust portal
Last reviewed 20 July 2026

Sub-processors

Third-party services that may process tenant data. We post material changes here 30 days before they take effect.

This list covers every third-party service that may process tenant data, whether it is active today or activates when you turn on a feature that uses it (call recording, meeting capture, web search) or when paid billing goes live. Pure infrastructure that does not process tenant data (DNS, uptime monitoring) is not listed.

Sub-processors15 services · counted, not rounded
  • Fly.ioLondon (lhr)Live

    Hosting for the FastAPI backend and ARQ worker (api.limena.io).

  • VercelGlobal edge (CDN)Live

    Hosting and CDN for the Next.js application at limena.io.

  • SupabaseEU (London)Live

    Managed PostgreSQL: the primary application database holding tenant records.

  • UpstashEU (London)Live

    Managed Redis: cache, ARQ job queue, rate-limit counters, and AI usage quotas.

  • Cloudflare R2Global edgeLive

    Object storage for files you upload: prospect-list CSVs and entity attachments.

  • AnthropicUnited StatesLive

    AI inference for tenants on the managed "Limena AI" tier (Claude API). Bring-your-own-key tenants use their own provider instead.

  • OpenAIUnited StatesLive

    Text embeddings for semantic search and record-similarity features (Embeddings API). Short snippets from your records are sent to generate vectors; per OpenAI’s API terms, inputs are not used to train their models.

  • ResendEULive

    Outbound system mail: invitations, password resets, demo-request notifications. NOT outbound tenant campaigns (those route through your connected Gmail or Microsoft 365 account).

  • SentryEU (Frankfurt)Live

    Backend + frontend exception capture. Tenant data is never intentionally sent; stack traces, request IDs, and URL paths only.

  • Google (Gmail API)Your account’s regionLive

    Only for tenants who connect a Gmail or Google Workspace mailbox via OAuth. Limena reads + sends on the connected mailbox; reply notifications use Google Cloud Pub/Sub.

  • Microsoft (Graph API)Your account’s regionLive

    Only for tenants who connect a Microsoft 365 / Outlook mailbox via OAuth. Limena reads + sends on the connected mailbox, with reply ingestion via Graph subscriptions.

  • StripeUnited StatesAt billing launch

    Payment processing and subscription billing. Receives the tenant name, a billing email, and a tenant reference to create a customer and take card payments; card details go straight to Stripe and are never stored by Limena.

  • DeepgramUnited StatesWith call recording

    Speech-to-text for call recording. Call audio is sent for transcription only when a workspace turns on call capture, which is off by default.

  • Recall.aiUnited States (us-east-1)With meeting recording

    Meeting-bot capture: joins and records video meetings to produce a recording and transcript. Active only when a workspace turns on meeting capture, which is off by default.

  • TavilyUnited StatesWith web search

    Web-search fallback. When a workspace has web search enabled and the self-hosted search engine returns nothing, the search query (not your records) is sent to Tavily.

Materially new sub-processors (meaning a new third party that will process tenant data beyond what these existing categories cover) are announced here at least 30 days before going live, except where they are a like-for-like replacement of an existing entry.