LegalLead360 Legal
Lead360 Subprocessors
The external service providers that may process personal data to host, secure, operate, bill, communicate, integrate, and support Lead360.
Lead360 uses a focused set of infrastructure and feature providers. The providers that process a customer data depend on the features and connected accounts the customer enables.
How to read this list
A subprocessor processes Customer Personal Data for Lead360 when Lead360 provides the service as a processor. Some listed companies also act independently for their own purposes, especially payment, telecommunications, social, and connected-account providers. Self-hosted components such as MySQL, PostgreSQL, Redis, Mattermost, Activepieces, and Ollama are part of Lead360 infrastructure and are not separate external subprocessors unless hosted by another listed provider.
Current subprocessors and providers
| Provider | Purpose | Data involved | Typical location |
|---|---|---|---|
| Hostinger Operations, UAB | Server and infrastructure hosting. | Application databases, Customer Data, files, logs, and service configuration. | United States and selected hosting regions. |
| Cloudflare, Inc. | DNS, CDN, traffic security, WAF, Turnstile, and R2 object storage where configured. | IP and request data, security signals, website traffic, recordings, and stored objects. | Global network and United States. |
| Twilio Inc. | Phone numbers, SMS, voice, verification, call routing, and recording services. | Phone numbers, message content, call metadata, recordings, verification events, and delivery status. | United States and global telecommunications networks. |
| Stripe, Inc. | Subscription billing, Connect, invoices, and payment processing. | Account, billing, transaction, payment, tax, and fraud-prevention information. | United States and global payment networks. |
| Cerebras Systems Inc. | Hosted model inference for configured Ask360 and related features. | Selected prompts, retrieved context, instructions, and generated outputs. | United States. |
| LangChain, Inc. / LangSmith | AI observability, tracing, evaluation, and diagnostics. | Trace identifiers, diagnostic metadata, evaluations, and content included in configured traces. | United States. |
| Google LLC | Authentication, OAuth, calendar, and other connected Google services. | Account identifiers, tokens, calendar data, and customer-authorized connected content. | Global. |
| Meta Platforms, Inc. | Facebook and Instagram authentication, webhooks, messaging, and social integrations. | Account identifiers, tokens, profile, page, message, lead, and webhook data authorized by the customer. | Global. |
Customer-connected services
A customer may connect additional services through APIs, webhooks, automation pieces, marketplace apps, embeds, or custom code. Those providers process data at the customer direction and may be independent controllers or customer subprocessors. They are not automatically included in this list. Customers must review each provider terms, privacy practices, location, permissions, retention, and regulated-data eligibility before connecting it.
Changes and objections
Lead360 will update this page when a material subprocessor is added or replaced. A customer that requires direct notification should contact [email protected]. Objections under the DPA must be submitted within 30 days of notice and explain the reasonable data-protection concern. Product features may be unavailable if the necessary provider cannot be used.
Contact
Questions about this document
Email [email protected] and include the document name, customer account, and the issue you want us to review. Do not send passwords, private keys, payment credentials, or PHI.
Contact Lead360