Subprocessors

Last updated: 2026-05-27

LokBox uses the third-party services below to deliver its product. Each is bound by a Data Processing Agreement (DPA) and processes personal data only as instructed by LokBox. Material changes (new subprocessors, removed subprocessors) are announced via email and on this page at least 30 days before they take effect.

Anthropic PBC↗

PurposeLLM model provider (Claude Sonnet 4.6) — primary AI planner and agent reasoning. Accessed via AWS Bedrock's EU inference profile (no direct calls from LokBox infrastructure to Anthropic systems).

LocationUSA (model weights); inference runs in EU only via AWS Bedrock (see row below)

Amazon Web Services EMEA SARL↗

PurposeAI inference platform (AWS Bedrock) — runs Anthropic Claude Sonnet 4.6 inference on LokBox's behalf through the EU cross-region inference profile eu.anthropic.claude-sonnet-4-6. Routes only through EU AWS regions (Frankfurt, Dublin, Paris, Milan, Spain, Stockholm). Zero data retention by Anthropic per AWS Bedrock terms.

LocationLuxembourg (corp); inference in EU regions only (eu-central-1, eu-west-1, eu-west-3, eu-south-1, eu-south-2, eu-north-1)

Stripe Payments Europe, Ltd.↗

PurposePayment processing. Card details are stored at Stripe, never on LokBox infrastructure.

LocationIreland (EU)

Supabase, Inc.↗

PurposePostgres database + authentication + object storage (recordings).

LocationEU (data centre Frankfurt, DE)

Hetzner Online GmbH↗

PurposeFrontend hosting (Next.js runtime + Caddy reverse proxy on lokbox-web-fsn1) AND agent backend infrastructure (browser automation runtime on lokbox-agent-fsn1). Both servers in Falkenstein, EU-resident. Frontend migrated from Vercel on 2026-05-27.

LocationGermany (Falkenstein / fsn1 DC)

Google LLC (Workspace APIs)↗

PurposeWorkspace OAuth (Gmail and Calendar APIs) — user-initiated skill execution against the user's own Google account.

LocationUSA (regional caches in EU)

Notion Labs, Inc.↗

PurposeNotion API — user-initiated skill execution against the user's own Notion workspace.

LocationUSA (US-headquartered; user-initiated OAuth against the user's own Notion workspace — no LokBox-side personal data processed beyond OAuth tokens)

Google Cloud Vertex AI↗

PurposeVertex AI inference (resolver + answer synthesis) — Gemini models, EU region.

LocationNetherlands (EU)

Resend, Inc.↗

PurposeTransactional email (account verification, billing notifications, DSAR fulfillment).

LocationEU region

Sentry (Functional Software, Inc.)↗

PurposeApplication error monitoring and performance traces (server-side only). EU data residency; no client-side telemetry transmits PII.

LocationEU region (ingest.de.sentry.io — Sentry GmbH operations)

Subprocessor	Purpose	Location	DPA / Trust page
Anthropic PBC	LLM model provider (Claude Sonnet 4.6) — primary AI planner and agent reasoning. Accessed via AWS Bedrock's EU inference profile (no direct calls from LokBox infrastructure to Anthropic systems).	USA (model weights); inference runs in EU only via AWS Bedrock (see row below)	↗
Amazon Web Services EMEA SARL	AI inference platform (AWS Bedrock) — runs Anthropic Claude Sonnet 4.6 inference on LokBox's behalf through the EU cross-region inference profile eu.anthropic.claude-sonnet-4-6. Routes only through EU AWS regions (Frankfurt, Dublin, Paris, Milan, Spain, Stockholm). Zero data retention by Anthropic per AWS Bedrock terms.	Luxembourg (corp); inference in EU regions only (eu-central-1, eu-west-1, eu-west-3, eu-south-1, eu-south-2, eu-north-1)	↗
Stripe Payments Europe, Ltd.	Payment processing. Card details are stored at Stripe, never on LokBox infrastructure.	Ireland (EU)	↗
Supabase, Inc.	Postgres database + authentication + object storage (recordings).	EU (data centre Frankfurt, DE)	↗
Hetzner Online GmbH	Frontend hosting (Next.js runtime + Caddy reverse proxy on lokbox-web-fsn1) AND agent backend infrastructure (browser automation runtime on lokbox-agent-fsn1). Both servers in Falkenstein, EU-resident. Frontend migrated from Vercel on 2026-05-27.	Germany (Falkenstein / fsn1 DC)	↗
Google LLC (Workspace APIs)	Workspace OAuth (Gmail and Calendar APIs) — user-initiated skill execution against the user's own Google account.	USA (regional caches in EU)	↗
Notion Labs, Inc.	Notion API — user-initiated skill execution against the user's own Notion workspace.	USA (US-headquartered; user-initiated OAuth against the user's own Notion workspace — no LokBox-side personal data processed beyond OAuth tokens)	↗
Google Cloud Vertex AI	Vertex AI inference (resolver + answer synthesis) — Gemini models, EU region.	Netherlands (EU)	↗
Resend, Inc.	Transactional email (account verification, billing notifications, DSAR fulfillment).	EU region	↗
Sentry (Functional Software, Inc.)	Application error monitoring and performance traces (server-side only). EU data residency; no client-side telemetry transmits PII.	EU region (ingest.de.sentry.io — Sentry GmbH operations)	↗

Subscribe to changes: email privacy@lokbox.ch with subject "subprocessor updates".

info@lokbox.ch · +41 78 845 84 66

Lischenweg 7, 4915 St. Urban (Canton of Lucerne), Switzerland