Lua Global Inc. Subprocessors
Lua AI is an Agent OS platform for building enterprise-grade AI agents, providing AI agent infrastructure, voice, messaging, and automation tools.
- Subprocessors
- 39
- Locations
- 27
- Categories
- 17
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud Infrastructure | Cloud compute, storage, network, key-management, secrets-management, transactional email; primary hosting platform for Lua production environment. | EU (Ireland) limited control-plane functions in United States | All personal data categories flowing through the platform (in transit and at rest); infrastructure and application logs containing personal data. |
| Cloudflare, Inc. | Cloud Infrastructure | CDN, WAF, DDoS protection, edge TLS termination for heylua.ai and connected subdomains. | Global edge control plane in United States | IP addresses; user-agent; referrer; edge request metadata; TLS handshake metadata. |
| Anthropic, PBC | AI | LLM inference (Claude family) for agent completions. |
 United States
|
Prompts and completion content (which may include any personal data the end-user or customer's tools introduce); tool-call traces. |
| OpenAI, L.L.C. | AI | LLM inference (GPT family) for agent completions where the customer selects an OpenAI model; embeddings for RAG flows. |
United States
|
Prompts and completion content (which may include any personal data the end-user or customer's tools introduce); tool-call traces. |
| Google LLC | AI | LLM inference (Gemini family) where the customer selects a Google model; image generation; conversation analysis; search grounding (Vertex AI and Gemini API). |
Google Cloud — EU region pool
United States
|
Prompts and completion content, including user-supplied media (images, documents, audio/video); tool-call traces. |
| xAI Corp. | AI | LLM inference (Grok family) where the customer selects an xAI model. |
United States
|
Prompts and completion content; tool-call traces. |
| Groq, Inc. | AI | High-throughput LLM inference where the customer selects a Groq-served model; retrieval processing for the platform memory engine. |
United States
|
Prompts and completion content; memory-retrieval text. |
| DeepSeek | AI | LLM inference where the customer selects a DeepSeek model. |
 China
|
Prompts and completion content. |
| Alibaba Cloud | AI | LLM inference where the customer selects a Qwen model (Model Studio / Qwen, international endpoint). |
 Singapore
|
Prompts and completion content. |
| Moonshot AI | AI | LLM inference where the customer selects a Kimi model. | International endpoint of a PRC-headquartered provider | Prompts and completion content. |
| OpenRouter, Inc. | AI | Model-routing gateway for models not served by a direct provider integration. | United States (gateway) downstream model per customer selection | Prompts and completion content routed to the selected downstream model provider. |
| MongoDB Atlas | Database | Primary application database for agent transcripts, invocation history, and per-partner vector embeddings. | AWS EU (Ireland) for production | Agent conversation transcripts; tool-call traces; invocation metadata; indexed source documents and embeddings; tenant-scoped end-user identifiers. |
| Neon, Inc. | Database | Serverless Postgres hosting the customer authentication and identity model. | AWS UK (London) | Email addresses; display names; hashed credentials; SSO claims; session tokens; MFA factor metadata; login timestamps; IP addresses. |
| LiveKit, Inc. | Video | Real-time voice/video infrastructure for agent voice sessions, telephony (SIP), and call recording. |
United States
|
Voice audio streams; call recordings; phone numbers; room and connection metadata. |
| Deepgram, Inc. | AI | Speech-to-text and text-to-speech for agent voice sessions. |
United States
|
Caller voice audio; transcripts; synthesized agent speech. |
| ElevenLabs, Inc. | AI | Text-to-speech for agent voice responses. |
United States
|
Agent response text (may include personal data from the conversation); synthesized audio. |
| Cartesia AI, Inc. | AI | Text-to-speech for agent voice responses. |
United States
|
Agent response text (may include personal data from the conversation); synthesized audio. |
| Recall.ai | Video | Meeting-bot infrastructure for agents that join video meetings on the customer's instruction. |
United States
|
Meeting audio and video; transcripts; participant names and identifiers. |
| Pusher Ltd | Communications | Real-time delivery of chat messages and events to connected clients (Channels). | European Union (EU cluster configured) UK-headquartered vendor | User identifiers; live message payloads. |
| Meta Platforms, Inc. | Communications | WhatsApp, Facebook Messenger, and Instagram channel connectivity for agents. |
United States
|
Phone numbers; message content; media; contact profile data. |
| Vonage | Communications | SMS, voice, and messaging channel connectivity, including phone-number provisioning and carrier registration. |
United States
|
Phone numbers; SMS and message content; carrier-registration business contact data. |
| Whapi.Cloud | Communications | WhatsApp channel connectivity for certain agent deployments (being discontinued; personal data being migrated to official WhatsApp provider). | Global infrastructure | Phone numbers; message content; media. |
| Microsoft Corporation | Communications | Microsoft Teams channel connectivity for agents (Azure Bot Service / Microsoft Teams). |
United States
global Microsoft infrastructure
|
Teams user identifiers; message content. |
| AgentMail, Inc. | Programmatic email inboxes for agents (sending and receiving email on the heymail.ai domain). |
United States
|
Email addresses; email content and attachments; message metadata. | |
| Unstructured Technologies, Inc. | AI | Document parsing and extraction for retrieval-augmented generation ingestion. |
United States
|
Customer-indexed documents, which may contain personal data. |
| Unified.to | Data Platform | Unified integration API connecting customer-authorized business tools (e.g. CRM) to agents. |
United States
|
Records from customer-connected systems, including names, emails, and activity data. |
| Paystack | Payment Processing | Payment processing for commerce transactions completed through customer agents in supported African markets. | Nigeria with Stripe-group infrastructure | Customer email; payment and transaction data (card data is held by Paystack). |
| Nuitee Travel | Travel | Hotel-booking fulfilment for travel-agent deployments. | Global infrastructure | Guest names; email addresses; booking details. |
| Better Stack | Monitoring | Log aggregation, tracing, alerting, uptime monitoring. Receives a stream of application and infrastructure telemetry. | European Union (Better Stack EU region) for log storage control plane includes US hops | IP addresses; user identifiers (where logged); request metadata; alert payloads; application stdout. |
| Functional Software, Inc. | Monitoring | Application error tracking for production services. | European Union (EU data residency) | Error events and stack traces, which may include user identifiers, IP addresses, and request metadata. |
| Slack Technologies, LLC | Communications | Internal real-time messaging. Used for engineering on-call coordination, incident channels, general internal communication, and notifications of inbound leads and sign-ups. |
United States
|
Names and email addresses; message content (may include personal data when staff discuss customer matters); lead and sign-up contact details posted into internal channels; channel metadata; file uploads. |
| Linear Orbit, Inc. | Productivity | Issue tracking, sprint planning, support-issue triage routing. |
United States
|
Names and email addresses of users; ticket content (which may reference personal data when describing customer issues); attachments. |
| Letsdeel, Inc. | HR | HRIS, payroll, contractor management, employer-of-record (for some jurisdictions). | United States HQ with regional sub-processors per Deel's matrix | Employee names; personal email and phone; home address; date of birth; national IDs / tax IDs; bank details; employment contract; salary and benefits; performance notes; leave and sickness records. |
| Stripe Payments Europe, Ltd. | Payment Processing | Payment processing for customer invoices. Stripe holds the card data; Lua holds only Stripe customer/subscription identifiers. | Ireland for European Stripe operations United States for some global flows | Billing contact name; billing email; billing address; VAT/tax ID; payment-method tokens (not card numbers); invoice line items. |
| HubSpot, Inc. | CRM | Marketing CRM, newsletter sends, demo-request capture and meeting-scheduling embeds. |
United States
|
Names; business email; job title; company; consent records; engagement events; unsubscribe state. |
| PostHog Inc. | Analytics | Product analytics for the Lua console (customer-staff usage) and, with your opt-in consent, visitor analytics on heylua.ai. | United States (PostHog US Cloud) | Pseudonymous user identifier; page-view and feature events; user-agent; truncated IP (last octet removed); timestamps. |
| Apollo.io | Sales | With your opt-in to advertising cookies, company-level identification of heylua.ai visitors (which organisation a visit comes from), for B2B sales follow-up. Person-level identification is switched off. |
United States
|
IP address; user-agent; page URLs and referrer; campaign (UTM) parameters; an anonymous visitor identifier held in browser local storage. |
| The Ghost Foundation | CMS | Blog and newsletter membership for heylua.ai content. | United States (Ghost(Pro) managed hosting) | Email addresses; names; subscription state. |
| StackBlitz, Inc. | Developer Tools | Interactive code-tutorial environment embedded on the heylua.ai /learn page. |
United States
|
IP addresses; user-agent; embed cookies and local storage of /learn visitors. |
No subprocessors match your filters.
November 8, 2026
+39 added
- + Amazon Web Services (AWS) (Cloud Infrastructure)
- + Cloudflare, Inc. (Cloud Infrastructure)
- + Anthropic, PBC (AI)
- + OpenAI, L.L.C. (AI)
- + Google LLC (AI)
- + xAI Corp. (AI)
- + Groq, Inc. (AI)
- + DeepSeek (AI)
- + Alibaba Cloud (AI)
- + Moonshot AI (AI)
- + OpenRouter, Inc. (AI)
- + MongoDB Atlas (Database)
- + Neon, Inc. (Database)
- + LiveKit, Inc. (Video)
- + Deepgram, Inc. (AI)
- + ElevenLabs, Inc. (AI)
- + Cartesia AI, Inc. (AI)
- + Recall.ai (Video)
- + Pusher Ltd (Communications)
- + Meta Platforms, Inc. (Communications)
- + Vonage (Communications)
- + Whapi.Cloud (Communications)
- + Microsoft Corporation (Communications)
- + AgentMail, Inc. (Email)
- + Unstructured Technologies, Inc. (AI)
- + Unified.to (Data Platform)
- + Paystack (Payment Processing)
- + Nuitee Travel (Travel)
- + Better Stack (Monitoring)
- + Functional Software, Inc. (Monitoring)
- + Slack Technologies, LLC (Communications)
- + Linear Orbit, Inc. (Productivity)
- + Letsdeel, Inc. (HR)
- + Stripe Payments Europe, Ltd. (Payment Processing)
- + HubSpot, Inc. (CRM)
- + PostHog Inc. (Analytics)
- + Apollo.io (Sales)
- + The Ghost Foundation (CMS)
- + StackBlitz, Inc. (Developer Tools)