Terms · Privacy · Subprocessors · Security · AI · Acceptable use · Accessibility · DPA · Français

Subprocessors

Version 1.0 · Effective 2026-08-20 · Last updated 2026-08-20

This page lists every company that processes personal data on behalf of LobiSolutions in order to deliver LobiPlan, what each one receives, and where it runs. It binds LobiSolutions and is referenced by the Privacy Policy, the Security page and the Data Processing Addendum. The table is the same in all three places.

1. The register

Status means what it says. Three of these companies are configured in the product but hold no live customer data today, because the features that use them are opt-in per meeting and nobody has turned them on. We list them anyway: omitting them would make this page false the first day a customer enables recording.

Vendor	What it does	Personal data it receives	Where it processes	Status
Supabase	Database, authentication, file storage, serverless functions	All application data: profiles, work items, notes, approvals, messages, HR records, financial data, uploaded files	Canada — `ca-central-1`	Live
Vercel	Application and website hosting, CDN	Request metadata: IP address, headers, paths. No customer database content — the application has no server-side rendering, so your browser talks to the Canadian database directly	Global edge	Live
Anthropic	AI assistant, summaries, drafting, document reading	Work item text and titles, chat messages, images of receipts and bank statements, pantry and recipe photographs, meeting transcripts	United States	Live
Resend	Outbound transactional email, digests, and inbound email	Recipient email address, notification and digest content, inbound message bodies	United States	Live
Stripe	Payments, hosted checkout, billing portal	Billing name and address, email, invoices, subscription state. Card details are entered on Stripe's own pages and never reach LobiPlan	United States / global	Live
Plaid	Household bank connections — opt-in	Bank credentials, entered in Plaid's own interface and never seen by LobiPlan; account balances; transaction feeds including merchant names	United States / Canada	Live
LiveKit	LobiMeet video meetings	Live audio and video streams, participant identifiers	⚠ [TO CONFIRM: LiveKit's media routing region. If media routes to the nearest global edge, a Canadian meeting's audio and video may transit outside Canada. We will not state a region we have not established.]	Configured — no customer data as of 2026-08-20
AssemblyAI	Meeting transcription — opt-in per meeting	Meeting audio	United States	Configured — no customer data as of 2026-08-20
Amazon Web Services	Meeting recording storage — opt-in per meeting	Full meeting audio and video	Canada — `ca-central-1`	Configured — no customer data as of 2026-08-20

⚠ [TO CONFIRM: the registered legal entity name and country of establishment for each vendor above. "Stripe" is a brand, not a party you can serve, and a reviewer checking against an approved-vendor list needs the entity. We will not guess them.]

Opt-in features, so you can scope your own review

Three of these are only reached if you turn a feature on. If you will never use them, you can scope them out of your assessment:

Plaid — only if a Household member connects a bank account.
AssemblyAI, AWS and LiveKit — only if a meeting is held in LobiMeet, and transcription and recording are each enabled per meeting.

2. Also used, but not processors of personal data

Listed for completeness. Leaving them off would be less honest than listing them with the note.

Service	What it does	Why it is not a subprocessor
frankfurter.dev / European Central Bank	Daily USD→CAD reference exchange rate	Outbound rate lookup only. It receives no personal data and no customer data of any kind.
Web Push (VAPID)	Browser push notifications	Self-hosted keys, no vendor. Your browser's own push service delivers the message; we hold the subscription.

3. What each vendor may do with your data

The claim "your data is never used to train models" is a promise about nine other companies whose terms differ. We will not make it in that form. Instead:

We do not train models on your data, and we never sell it. Below is what we can and cannot currently substantiate about each vendor, stated honestly rather than assumed.

Vendor	May it use your content to improve or train its models?
Anthropic	No. Under Anthropic's published API terms, inputs submitted through the API are not used to train their models by default. ⚠ [TO CONFIRM: read the current Anthropic Commercial Terms of Service and Data Processing Addendum, and record the date confirmed.]
Supabase, Vercel, AWS	Infrastructure providers do not train on customer content. ⚠ [TO CONFIRM: read the current Supabase, Vercel and AWS data processing terms.]
AssemblyAI	⚠ [TO CONFIRM: read the current AssemblyAI terms. Speech vendors have historically reserved model-improvement rights unless the customer opts out. This must be settled and opted out before transcription is enabled for any customer — today no customer has enabled it, so it can still be got right.]
Plaid	⚠ [TO CONFIRM: read the current Plaid End User Services Agreement and developer terms. Plaid processes some data for its own purposes, which would make an absolute claim false for Household customers.]
LiveKit	⚠ [TO CONFIRM: read the current LiveKit terms.]
Resend	⚠ [TO CONFIRM: read the current Resend terms.]
Stripe	⚠ [TO CONFIRM: read the current Stripe Services Agreement and Data Processing Agreement.]

We state what a vendor's published terms say, attributed. We do not warrant another company's behaviour, and you should be suspicious of any vendor who does.

4. International transfers

Application data is stored in Canada. Content leaves Canada on ordinary use, to the companies and locations named in §1.

Canada holds a partial adequacy decision from the European Commission for organizations subject to PIPEDA, so a transfer from the EU/EEA to LobiSolutions needs no further instrument. The onward transfer from LobiSolutions to the United States vendors above is separate and rests on each vendor's own data processing agreement, which incorporate the EU Standard Contractual Clauses.

⚠ [TO CONFIRM: for each United States vendor, whether its data processing agreement has been accepted and countersigned and a copy filed, and whether it is certified under the EU-US Data Privacy Framework. Several vendors require an affirmative click-through to activate their DPA — holding an account is not the same as holding a DPA.]

5. Changes to this list

We give 30 days' advance notice before a new or replacement subprocessor begins processing customer data. Notice is sent by email to each account's designated contact and posted in the changelog below with its effective date.

If you object to a new subprocessor on reasonable grounds, contact us at bsimba6@gmail.com within the notice period. We will work with you to resolve it. If we cannot, you may terminate the affected service for the remainder of your term without penalty, with a pro-rata refund of amounts paid in advance for the terminated portion.

We do not offer a veto over our own infrastructure. No vendor of any size can operate one, and offering one would not be honest.

Emergency replacement. Where a subprocessor must be replaced urgently for security or continuity reasons, we will give notice as soon as practicable rather than in advance. We will use this sparingly, and each use is recorded in the changelog with its reason.

Designated contact. Notices under this section go to the security and privacy contact you give us. If you have not given us one, send it to bsimba6@gmail.com.

6. Contact

Questions about anything on this page: bsimba6@gmail.com.

Changes to this document

We notify material changes in advance, as set out in §5. Previous versions are available on request from bsimba6@gmail.com.

Version	Date	Change
1.0	2026-08-20	First publication. Nine subprocessors listed; LiveKit, AssemblyAI and Amazon Web Services recorded as configured but holding no customer data.

LobiPlan for organizations · LobiPlan for households · bsimba6@gmail.com