Subprocessors

    Every vendor that touches your data — listed with purpose, scope, and region.

    LemRank is built on a deliberately short list of subprocessors. We update this page whenever a vendor is added, removed, or replaced. Enterprise customers can subscribe to email notifications for material changes.

    Active subprocessors

    7 vendors in scope today.

    Supabase (Lovable Cloud)

    supabase.com

    Primary application database, authentication, file storage, and edge functions.

    Data handled
    Account profiles, projects, keywords, rankings, reports, audit logs.
    Region
    EU — Frankfurt (eu-central-1)

    Amazon Web Services

    aws.amazon.com

    Underlying infrastructure for our primary database and object storage (via Supabase).

    Data handled
    Same scope as the application database. Encrypted at rest under AWS-managed keys.
    Region
    EU — Frankfurt (eu-central-1)

    Stripe

    stripe.com

    Billing, subscription management, and payment processing.

    Data handled
    Billing email, billing address, last 4 digits of card, transaction history.
    Region
    EU and US (per Stripe routing)

    Resend

    resend.com

    Transactional and product email delivery (invites, receipts, reports).

    Data handled
    Recipient email, subject, body of the message sent.
    Region
    EU and US

    OpenAI, Google AI Studio, Anthropic (via Lovable AI Gateway)

    openai.com

    AI explanations, content optimization, and AI-search visibility analysis.

    Data handled
    Prompts containing project keywords, URLs, and competitive context. Customer data is never used for model training.
    Region
    US (model providers); EU edge routing for the gateway.

    DataForSEO

    dataforseo.com

    SERP retrieval, backlink intelligence, and keyword research data.

    Data handled
    Keyword strings, target domains, and country/language codes you choose to track.
    Region
    US (with EU caching layer)

    Lovable

    lovable.dev

    Application hosting and deployment platform for the LemRank web app.

    Data handled
    Static assets and request logs (no customer database content).
    Region
    EU primary
    Change notifications

    Stay informed when this list changes.

    Enterprise customers can request email notifications whenever a subprocessor is added, removed, or its scope materially changes. The default notice period is 30 days before the change takes effect, giving you time to object in writing.

    Email legal@lemrank.com to subscribe, or to request the signed Data Processing Agreement that lists these subprocessors as Annex B.