Legal · Sub-processors
SUB-
PROCESSORS.
Last updated: 1 August 2025 · Changes notified 30 days in advance
Lengdon uses the following sub-processors to provide the platform. Per our Data Processing Agreement, we provide 30 days notice before adding or replacing sub-processors. Customers may object to changes during this period.
Sub-processor
Category
Location
Amazon Web Services (AWS)
Underlying hosting, compute, and storage for the Lengdon platform's database and file infrastructure.
Cloud infrastructure
United States / EU
Cloudflare
Content delivery, DDoS protection, TLS termination, and application hosting via Cloudflare Pages and Workers.
CDN, security & hosting
United States / Global
Stripe
Payment method storage and processing for Lengdon subscription billing. Not used for transaction payment confirmation in closing rooms.
Payment processing
United States
Resend
Delivery of system notifications, closing-sequence confirmation emails, and account verification messages.
Transactional email
United States
Supabase
PostgreSQL database hosting, authentication, and file storage for deal room data, audit logs, and user accounts.
Database & authentication
United States / EU
HubSpot
Stores contact records (name, email, account role) created on signup, waitlist join, or contact form submission. Used for account communications and support — not for advertising.
CRM & contact management
United States / EU
OpenAI
Processes document and deal room content submitted to AI features — document review, diligence analysis, and Q&A summarisation. Per OpenAI's published API policy, content sent via the API is not used to train their models, and abuse-monitoring logs are retained for up to 30 days. A data processing agreement with this provider is not yet in place; until it is, do not submit content to AI features that you would not accept being processed under those terms.
AI processing
United States
Daily.co
Hosts live audio and video for in-room meetings and interview sessions. Processes participant audio, video, and display names for the duration of a call.
Video meetings
United States
To receive advance notification of sub-processor changes, contact privacy@lengdon.com. For questions about our Data Processing Agreement, see the full DPA at lengdon.com/legal/dpa.