On this page
1.About this listLink to section 1
A subprocessor is a third party that LiteSurface, Inc. engages to process customer personal data on its behalf. Under our Data Processing Addendum, each one is bound by written data protection terms at least as protective as ours, may use the data only to provide its service to us, and is our responsibility.
2.Current subprocessorsLink to section 2
| Subprocessor | Purpose | Customer data processed | Location | Details |
|---|---|---|---|---|
| OpenAI | AI inference: research planning, claim extraction, concept generation, evaluation, synthesis, artifact drafting, and text embeddings for retrieval | Task-required Customer Content, such as strategy text, source excerpts, claims, and concepts. Fields marked not for models are excluded. | United States | Privacy policy (opens in a new tab)Trust portal (opens in a new tab) |
| Anthropic | AI inference: research planning, concept generation, independent evaluation, artifact drafting, and output checks | Task-required Customer Content, as above. Fields marked not for models are excluded. | United States | Privacy policy (opens in a new tab)Trust center (opens in a new tab) |
| Tavily | Web search for research runs | Search queries derived from project context. No uploaded documents or account data. | United States Confirm region | Privacy policy (opens in a new tab) |
| Resend | Email: sign-in links, email verification, password resets, invitations, notifications, and product-updates confirmations for people who subscribe on our website | Recipient name and email address, and message content such as links, workspace names, and notification text | United States | Privacy policy (opens in a new tab)Security (opens in a new tab) |
| Cloudflare (R2), or the configured S3-compatible object storage | Object storage for exports and generated artifact files | Export and artifact files, which may contain any Customer Content | Region per storage configuration To be confirmed at launch | Privacy policy (opens in a new tab)Trust hub (opens in a new tab) |
| Application hosting, managed PostgreSQL, and job queue To be confirmed at launch | Runs the application, API, and background workers; stores the database and short-lived job data | All Service data, including account data and Customer Content | To be confirmed at launch | Published at launch |
Entries marked “To be confirmed at launch” will be completed before general availability, with the usual notice period for any change after that.
3.AI providers and your own keysLink to section 3
Workspace admins choose which AI providers may receive content. A provider that is not allowed receives nothing from that workspace, and fields marked not for models are removed before any prompt is assembled. Raw prompts and responses are not written to our logs by default.
When a workspace uses its own provider keys, the provider processes that data under the customer’s agreement with it and acts as the customer’s provider, not as our subprocessor. When we supply the credentials, the provider is our subprocessor as listed above.
4.Services that are not subprocessorsLink to section 4
- Sign-in providers (Google and GitHub, where enabled) authenticate you at your choice and send us your basic profile. They act under their own terms.
- Websites you ask us to fetch receive a standard request from our crawler. We send them no customer data.
- Fixture mode runs entirely within our systems and calls no AI or search provider.
5.How we announce changesLink to section 5
We will update this page and email workspace owners and subscribers at least 30 days before a new subprocessor begins processing customer personal data. Customers may object within 15 days, as described in the DPA. In an emergency, such as replacing a failed provider to keep the Service running, we may give shorter notice and will explain why.
Subscribe to updates
Email privacy@litesurface.com from your work address to receive change notices.
6.Change historyLink to section 6
| Date | Change |
|---|---|
| September 24, 2026 | Initial list published by LiteSurface for early access. |
Questions about this document
Write to legal@litesurface.com for legal questions or privacy@litesurface.com for privacy requests. Postal notices go to LiteSurface, Inc., [Registered address to be confirmed].