Subprocessors

Every company that can see data held in Limn, what each one does with it, and where it does it.

Last updated: September 21, 2026

On this page

About this list

Limn runs on other companies' services, and some of them can see the data a workspace keeps here. Every one of them is on this page, with what it does, what it can see, and where.

A row marked when is switched off until somebody turns it on — an account a workspace connects, or a payment processor that is one of three.

Before another company joins this list, every account owner is emailed 30 days ahead. A workspace that objects can reply to that email and we will talk it through.

Joining soon

No company is waiting to join this list.

Running the service

Vercel
Runs the application, stores uploaded files, and measures page speed.
What it sees
Every request made to the service, and every file a workspace uploads.
Where
United States (Ohio)
Privacy terms
Neon
Holds the database.
What it sees
Everything a workspace records: contacts, conversations, calls, jobs, invoices.
Where
United States (Ohio)
Privacy terms
Upstash
Counts requests so one workspace cannot flood the service, and carries live screen updates.
What it sees
Counters and short-lived identifiers. No records.
Where
Not confirmed
Privacy terms
Inngest
Schedules and runs the work that happens in the background.
What it sees
The contents of each queued piece of work — often a record identifier, sometimes message text.
Where
United States
Privacy terms
Sentry
Receives a report when something breaks, so it can be fixed.
What it sees
The error and where in the code it happened. Request bodies, addresses and account details are stripped before sending.
Where
United States
Privacy terms
Fly.io
Hosts the machine that renders video.
What it sees
The clips, images and words in a video while it is being made.
Where
United States (New Jersey)
Privacy terms

Running the service
Company	What it does	What it sees	Where	Terms
Vercel	Runs the application, stores uploaded files, and measures page speed.	Every request made to the service, and every file a workspace uploads.	United States (Ohio)	Privacy terms
Neon	Holds the database.	Everything a workspace records: contacts, conversations, calls, jobs, invoices.	United States (Ohio)	Privacy terms
Upstash	Counts requests so one workspace cannot flood the service, and carries live screen updates.	Counters and short-lived identifiers. No records.	Not confirmed	Privacy terms
Inngest	Schedules and runs the work that happens in the background.	The contents of each queued piece of work — often a record identifier, sometimes message text.	United States	Privacy terms
Sentry	Receives a report when something breaks, so it can be fixed.	The error and where in the code it happened. Request bodies, addresses and account details are stripped before sending.	United States	Privacy terms
Fly.io	Hosts the machine that renders video.	The clips, images and words in a video while it is being made.	United States (New Jersey)	Privacy terms

Calls, texts and email

Twilio
Carries phone calls and text messages, stores call recordings, and relays an in-browser video call when the two ends cannot reach each other directly.
What it sees
Phone numbers, the text of each message, recorded call audio, voicemail, and the audio and video of a relayed video call while it is in flight. Nothing from a video call is stored there.
Where
United States
Privacy terms
Brevo
Sends and receives email.
What it sees
Sender and recipient addresses, subject, message body, and attachments.
Where
European Union
Privacy terms
Textbelt
Sends the security texts: a sign-in code, or a warning that a password changed.
What it sees
The phone number on the account and the text of that one message.
Where
United States
Privacy terms
Slack
Posts notifications into a channel the workspace chose.
What it sees
The text of the notification, which can name a contact.
Where
United States
When
Only where a workspace has connected its own Slack.
Privacy terms
Zapmail
Supplies the extra mailboxes an outbound email campaign sends from.
What it sees
Mailbox addresses and the credentials for them.
Where
Not confirmed
When
Only where a workspace has connected its own account.
None published

Calls, texts and email
Company	What it does	What it sees	Where	Terms
Twilio	Carries phone calls and text messages, stores call recordings, and relays an in-browser video call when the two ends cannot reach each other directly.	Phone numbers, the text of each message, recorded call audio, voicemail, and the audio and video of a relayed video call while it is in flight. Nothing from a video call is stored there.	United States	Privacy terms
Brevo	Sends and receives email.	Sender and recipient addresses, subject, message body, and attachments.	European Union	Privacy terms
Textbelt	Sends the security texts: a sign-in code, or a warning that a password changed.	The phone number on the account and the text of that one message.	United States	Privacy terms
Slack	Posts notifications into a channel the workspace chose.Only where a workspace has connected its own Slack.	The text of the notification, which can name a contact.	United States	Privacy terms
Zapmail	Supplies the extra mailboxes an outbound email campaign sends from.Only where a workspace has connected its own account.	Mailbox addresses and the credentials for them.	Not confirmed	None published

Assistants, voice and video

Anthropic
The model behind the assistant, the drafting help and the summaries.
What it sees
What is asked, plus the records handed to it as context for that answer.
Where
United States
Privacy terms
RunPod
Runs an open-weight model. It answers when a workspace has selected that model, and it compares an answer when comparison is turned on.
What it sees
What is asked, plus the records handed to it as context for that answer.
Where
Not confirmed
When
When the alternative model is selected, the request goes here instead of Anthropic. When comparison is turned on, the same request is also sent here while Anthropic is still the model that answers. The comparison only records the two answers.
Privacy terms
OpenAI
Answers a workflow step that asks a model a question.
What it sees
The words of that step, which can include contact details the step was told to use.
Where
United States
When
Only where a workspace has set up that step and left it pointed at the suggested address.
Privacy terms
ElevenLabs
The voice that answers a phone line, and the words it hears.
What it sees
The caller's speech, the transcript of the call, and the phone number.
Where
United States
Privacy terms
AssemblyAI
Works out where each word falls in a video, so captions land on the beat.
What it sees
The audio of that video.
Where
United States
Privacy terms
Shotstack
Renders a video where the hosted renderer is the one in use.
What it sees
The clips, images and words in that video.
Where
Not confirmed
Privacy terms
Pexels
Supplies the stock footage offered while a video is being made.
What it sees
The word typed into the footage search. No records.
Where
European Union
Privacy terms
Pixabay
Supplies the stock footage offered while a video is being made.
What it sees
The word typed into the footage search. No records.
Where
European Union
Privacy terms
Brave Search
Looks up a company's own website when a contact is created from a company name.
What it sees
The company name being looked up.
Where
United States
When
Only where it is the lookup service in use; one of three, and off unless one is set.
Privacy terms
Tavily
The same lookup, where it is the service in use.
What it sees
The company name being looked up.
Where
United States
When
Only where it is the lookup service in use.
Privacy terms
Serper
The same lookup, where it is the service in use.
What it sees
The company name being looked up.
Where
United States
When
Only where it is the lookup service in use.
Privacy terms

Assistants, voice and video
Company	What it does	What it sees	Where	Terms
Anthropic	The model behind the assistant, the drafting help and the summaries.	What is asked, plus the records handed to it as context for that answer.	United States	Privacy terms
RunPod	Runs an open-weight model. It answers when a workspace has selected that model, and it compares an answer when comparison is turned on.When the alternative model is selected, the request goes here instead of Anthropic. When comparison is turned on, the same request is also sent here while Anthropic is still the model that answers. The comparison only records the two answers.	What is asked, plus the records handed to it as context for that answer.	Not confirmed	Privacy terms
OpenAI	Answers a workflow step that asks a model a question.Only where a workspace has set up that step and left it pointed at the suggested address.	The words of that step, which can include contact details the step was told to use.	United States	Privacy terms
ElevenLabs	The voice that answers a phone line, and the words it hears.	The caller's speech, the transcript of the call, and the phone number.	United States	Privacy terms
AssemblyAI	Works out where each word falls in a video, so captions land on the beat.	The audio of that video.	United States	Privacy terms
Shotstack	Renders a video where the hosted renderer is the one in use.	The clips, images and words in that video.	Not confirmed	Privacy terms
Pexels	Supplies the stock footage offered while a video is being made.	The word typed into the footage search. No records.	European Union	Privacy terms
Pixabay	Supplies the stock footage offered while a video is being made.	The word typed into the footage search. No records.	European Union	Privacy terms
Brave Search	Looks up a company's own website when a contact is created from a company name.Only where it is the lookup service in use; one of three, and off unless one is set.	The company name being looked up.	United States	Privacy terms
Tavily	The same lookup, where it is the service in use.Only where it is the lookup service in use.	The company name being looked up.	United States	Privacy terms
Serper	The same lookup, where it is the service in use.Only where it is the lookup service in use.	The company name being looked up.	United States	Privacy terms

Accounts a workspace connects

Google
Signing in, the calendar, the business listing, advertising, website statistics, maps and addresses.
What it sees
Bookings and their attendees, listing content and reviews, advertising figures, and an address as it is typed.
Where
Global
Privacy terms
Meta
Facebook and Instagram: posts, comments and direct messages.
What it sees
Post content, comments, direct messages, and the sender's name and identifier.
Where
Global
Privacy terms
LinkedIn
Publishing to a connected page.
What it sees
The content of each post and the figures that come back.
Where
Global
Privacy terms
TikTok
Publishing to a connected account.
What it sees
The video and its caption, and the figures that come back.
Where
Global
Privacy terms
Microsoft
The Outlook calendar, where that is the calendar a workspace books against.
What it sees
Bookings, their times, and the people invited.
Where
Global
Privacy terms
Apple
Signing in with an Apple account, and delivering notifications to an iPhone.
What it sees
The notification's title and first line, and the device it is sent to.
Where
Global
Privacy terms
Metered
Relays an in-browser call when the two ends cannot reach each other directly.
What it sees
The audio and video of that call while it is in flight. Nothing is stored there.
Where
Global
Privacy terms
GoHighLevel
Brings a workspace's own records across from a system it is leaving.
What it sees
The key the workspace supplies, and the records that come back through it.
Where
United States
When
Only during an import a workspace asked for.
Privacy terms

Accounts a workspace connects
Company	What it does	What it sees	Where	Terms
Google	Signing in, the calendar, the business listing, advertising, website statistics, maps and addresses.	Bookings and their attendees, listing content and reviews, advertising figures, and an address as it is typed.	Global	Privacy terms
Meta	Facebook and Instagram: posts, comments and direct messages.	Post content, comments, direct messages, and the sender's name and identifier.	Global	Privacy terms
LinkedIn	Publishing to a connected page.	The content of each post and the figures that come back.	Global	Privacy terms
TikTok	Publishing to a connected account.	The video and its caption, and the figures that come back.	Global	Privacy terms
Microsoft	The Outlook calendar, where that is the calendar a workspace books against.	Bookings, their times, and the people invited.	Global	Privacy terms
Apple	Signing in with an Apple account, and delivering notifications to an iPhone.	The notification's title and first line, and the device it is sent to.	Global	Privacy terms
Metered	Relays an in-browser call when the two ends cannot reach each other directly.	The audio and video of that call while it is in flight. Nothing is stored there.	Global	Privacy terms
GoHighLevel	Brings a workspace's own records across from a system it is leaving.Only during an import a workspace asked for.	The key the workspace supplies, and the records that come back through it.	United States	Privacy terms

Taking payment

Stripe
Two jobs: billing a workspace for its plan, and letting a workspace charge its own customers.
What it sees
Card details, entered on pages Stripe serves. The amount, the email address on the receipt, and the invoice reference.
Where
United States
When
For plan billing, only where it is the selected processor. For charging a workspace's own customers, whenever that workspace has set it up.
Privacy terms
Square
Bills a workspace for its plan.
What it sees
Card details, entered on pages Square serves. The amount and the email address on the receipt.
Where
United States
When
Only where it is the selected processor.
Privacy terms
Authorize.Net
Bills a workspace for its plan.
What it sees
Card details, entered on pages Authorize.Net serves. The amount and the email address on the receipt.
Where
United States
When
Only where it is the selected processor.
Privacy terms

Taking payment
Company	What it does	What it sees	Where	Terms
Stripe	Two jobs: billing a workspace for its plan, and letting a workspace charge its own customers.For plan billing, only where it is the selected processor. For charging a workspace's own customers, whenever that workspace has set it up.	Card details, entered on pages Stripe serves. The amount, the email address on the receipt, and the invoice reference.	United States	Privacy terms
Square	Bills a workspace for its plan.Only where it is the selected processor.	Card details, entered on pages Square serves. The amount and the email address on the receipt.	United States	Privacy terms
Authorize.Net	Bills a workspace for its plan.Only where it is the selected processor.	Card details, entered on pages Authorize.Net serves. The amount and the email address on the receipt.	United States	Privacy terms

Where the list says it is not confirmed

4 of the rows above leave the region unconfirmed. That is the honest answer rather than a guess: the company publishes no region we can point at, or the region is chosen per account and ours is not written down here yet. Ask and we will find out and tell you.

Questions

Write to support@launchwithlimn.com. How long each kind of record is kept is on the retention page, and there are 33 companies on this one.