← LokboxLokbox uses the third-party services below to deliver its product. Each is bound by a Data Processing Agreement (DPA) and processes personal data only as instructed by Lokbox. Material changes (new subprocessors, removed subprocessors) are announced via email and on this page at least 30 days before they take effect.
PurposeModel provider for current Claude processing. For the current Claude processing path through Amazon Bedrock, AWS states that model providers do not have access to customer prompts or completions.
LocationUSA (model weights); current Claude processing uses AWS Bedrock's EU geographic inference profile, with Frankfurt as the primary source Region and documented European destination Regions
Amazon Web Services EMEA SARL↗ PurposeFor current Claude processing, Lokbox uses AWS Bedrock's EU geographic inference profile with Frankfurt as the primary source Region. AWS may process requests in the European destination Regions documented for that profile. For the current Claude processing path through Amazon Bedrock, AWS states that model providers do not have access to customer prompts or completions. Any retention by AWS depends on the configured Bedrock data-retention mode and AWS's documented exceptions.
LocationLuxembourg (corp); AWS Bedrock EU geographic inference profile with Frankfurt as the primary source Region and documented European destination Regions
Stripe Payments Europe, Ltd.↗ PurposePayment processing. Card details are stored at Stripe, never on Lokbox infrastructure.
LocationIreland (EU)
PurposePostgres database + authentication + object storage (recordings).
LocationSwitzerland (data centre Zurich, CH); copy in Frankfurt, DE until 22.08.2026
PurposeFrontend hosting (Next.js runtime + Caddy reverse proxy) AND agent backend infrastructure (browser automation runtime). Both servers in Zurich, Switzerland. Migrated from Hetzner (Falkenstein, DE) on 2026-08-16; frontend previously migrated from Vercel on 2026-05-27.
LocationSwitzerland (Zurich)
Google LLC (Workspace APIs)↗ PurposeWorkspace OAuth (Gmail and Calendar APIs) — user-initiated skill execution against the user's own Google account.
LocationUSA (regional caches in EU)
PurposeNotion API — user-initiated skill execution against the user's own Notion workspace.
LocationUSA (US-headquartered; user-initiated OAuth against the user's own Notion workspace — no Lokbox-side personal data processed beyond OAuth tokens)
PurposeVertex AI inference (resolver + answer synthesis) — Gemini models, EU region.
LocationNetherlands (EU)
PurposeTransactional email (account verification, billing notifications, DSAR fulfillment).
LocationEU region
Sentry (Functional Software, Inc.)↗ PurposeApplication error monitoring and performance traces (server-side only). EU data residency; no client-side telemetry transmits PII.
LocationEU region (ingest.de.sentry.io — Sentry GmbH operations)
Subprocessors| Subprocessor | Purpose | Location | DPA / Trust page |
|---|
| Anthropic PBC | Model provider for current Claude processing. For the current Claude processing path through Amazon Bedrock, AWS states that model providers do not have access to customer prompts or completions. | USA (model weights); current Claude processing uses AWS Bedrock's EU geographic inference profile, with Frankfurt as the primary source Region and documented European destination Regions | ↗ |
|---|
| Amazon Web Services EMEA SARL | For current Claude processing, Lokbox uses AWS Bedrock's EU geographic inference profile with Frankfurt as the primary source Region. AWS may process requests in the European destination Regions documented for that profile. For the current Claude processing path through Amazon Bedrock, AWS states that model providers do not have access to customer prompts or completions. Any retention by AWS depends on the configured Bedrock data-retention mode and AWS's documented exceptions. | Luxembourg (corp); AWS Bedrock EU geographic inference profile with Frankfurt as the primary source Region and documented European destination Regions | ↗ |
|---|
| Stripe Payments Europe, Ltd. | Payment processing. Card details are stored at Stripe, never on Lokbox infrastructure. | Ireland (EU) | ↗ |
|---|
| Supabase, Inc. | Postgres database + authentication + object storage (recordings). | Switzerland (data centre Zurich, CH); copy in Frankfurt, DE until 22.08.2026 | ↗ |
|---|
| Infomaniak Network SA | Frontend hosting (Next.js runtime + Caddy reverse proxy) AND agent backend infrastructure (browser automation runtime). Both servers in Zurich, Switzerland. Migrated from Hetzner (Falkenstein, DE) on 2026-08-16; frontend previously migrated from Vercel on 2026-05-27. | Switzerland (Zurich) | ↗ |
|---|
| Google LLC (Workspace APIs) | Workspace OAuth (Gmail and Calendar APIs) — user-initiated skill execution against the user's own Google account. | USA (regional caches in EU) | ↗ |
|---|
| Notion Labs, Inc. | Notion API — user-initiated skill execution against the user's own Notion workspace. | USA (US-headquartered; user-initiated OAuth against the user's own Notion workspace — no Lokbox-side personal data processed beyond OAuth tokens) | ↗ |
|---|
| Google Cloud Vertex AI | Vertex AI inference (resolver + answer synthesis) — Gemini models, EU region. | Netherlands (EU) | ↗ |
|---|
| Resend, Inc. | Transactional email (account verification, billing notifications, DSAR fulfillment). | EU region | ↗ |
|---|
| Sentry (Functional Software, Inc.) | Application error monitoring and performance traces (server-side only). EU data residency; no client-side telemetry transmits PII. | EU region (ingest.de.sentry.io — Sentry GmbH operations) | ↗ |
|---|
Subscribe to changes: email privacy@lokbox.ch with subject "subprocessor updates".
info@lokbox.ch · +41 78 845 84 66
Lischenweg 7, 4915 St. Urban (Canton of Lucerne), Switzerland