Lua Global Inc. Subprocessors

Lua AI is an Agent OS platform for building enterprise-grade AI agents, providing AI agent infrastructure, voice, messaging, and automation tools.

AI / SaaS / Developer Tools heylua.ai
View source page
Subprocessors
39
Locations
27
Categories
17
Last scanned

39 subprocessors

Name Category Purpose Location Data processed
Amazon Web Services (AWS) Cloud Infrastructure Cloud compute, storage, network, key-management, secrets-management, transactional email; primary hosting platform for Lua production environment. EU (Ireland) limited control-plane functions in United States All personal data categories flowing through the platform (in transit and at rest); infrastructure and application logs containing personal data.
Cloudflare, Inc. Cloud Infrastructure CDN, WAF, DDoS protection, edge TLS termination for heylua.ai and connected subdomains. Global edge control plane in United States IP addresses; user-agent; referrer; edge request metadata; TLS handshake metadata.
Anthropic, PBC AI LLM inference (Claude family) for agent completions. United States Prompts and completion content (which may include any personal data the end-user or customer's tools introduce); tool-call traces.
OpenAI, L.L.C. AI LLM inference (GPT family) for agent completions where the customer selects an OpenAI model; embeddings for RAG flows. United States Prompts and completion content (which may include any personal data the end-user or customer's tools introduce); tool-call traces.
Google LLC AI LLM inference (Gemini family) where the customer selects a Google model; image generation; conversation analysis; search grounding (Vertex AI and Gemini API). Google Cloud — EU region pool United States Prompts and completion content, including user-supplied media (images, documents, audio/video); tool-call traces.
xAI Corp. AI LLM inference (Grok family) where the customer selects an xAI model. United States Prompts and completion content; tool-call traces.
Groq, Inc. AI High-throughput LLM inference where the customer selects a Groq-served model; retrieval processing for the platform memory engine. United States Prompts and completion content; memory-retrieval text.
DeepSeek AI LLM inference where the customer selects a DeepSeek model. China Prompts and completion content.
Alibaba Cloud AI LLM inference where the customer selects a Qwen model (Model Studio / Qwen, international endpoint). Singapore Prompts and completion content.
Moonshot AI AI LLM inference where the customer selects a Kimi model. International endpoint of a PRC-headquartered provider Prompts and completion content.
OpenRouter, Inc. AI Model-routing gateway for models not served by a direct provider integration. United States (gateway) downstream model per customer selection Prompts and completion content routed to the selected downstream model provider.
MongoDB Atlas Database Primary application database for agent transcripts, invocation history, and per-partner vector embeddings. AWS EU (Ireland) for production Agent conversation transcripts; tool-call traces; invocation metadata; indexed source documents and embeddings; tenant-scoped end-user identifiers.
Neon, Inc. Database Serverless Postgres hosting the customer authentication and identity model. AWS UK (London) Email addresses; display names; hashed credentials; SSO claims; session tokens; MFA factor metadata; login timestamps; IP addresses.
LiveKit, Inc. Video Real-time voice/video infrastructure for agent voice sessions, telephony (SIP), and call recording. United States Voice audio streams; call recordings; phone numbers; room and connection metadata.
Deepgram, Inc. AI Speech-to-text and text-to-speech for agent voice sessions. United States Caller voice audio; transcripts; synthesized agent speech.
ElevenLabs, Inc. AI Text-to-speech for agent voice responses. United States Agent response text (may include personal data from the conversation); synthesized audio.
Cartesia AI, Inc. AI Text-to-speech for agent voice responses. United States Agent response text (may include personal data from the conversation); synthesized audio.
Recall.ai Video Meeting-bot infrastructure for agents that join video meetings on the customer's instruction. United States Meeting audio and video; transcripts; participant names and identifiers.
Pusher Ltd Communications Real-time delivery of chat messages and events to connected clients (Channels). European Union (EU cluster configured) UK-headquartered vendor User identifiers; live message payloads.
Meta Platforms, Inc. Communications WhatsApp, Facebook Messenger, and Instagram channel connectivity for agents. United States Phone numbers; message content; media; contact profile data.
Vonage Communications SMS, voice, and messaging channel connectivity, including phone-number provisioning and carrier registration. United States Phone numbers; SMS and message content; carrier-registration business contact data.
Whapi.Cloud Communications WhatsApp channel connectivity for certain agent deployments (being discontinued; personal data being migrated to official WhatsApp provider). Global infrastructure Phone numbers; message content; media.
Microsoft Corporation Communications Microsoft Teams channel connectivity for agents (Azure Bot Service / Microsoft Teams). United States global Microsoft infrastructure Teams user identifiers; message content.
AgentMail, Inc. Email Programmatic email inboxes for agents (sending and receiving email on the heymail.ai domain). United States Email addresses; email content and attachments; message metadata.
Unstructured Technologies, Inc. AI Document parsing and extraction for retrieval-augmented generation ingestion. United States Customer-indexed documents, which may contain personal data.
Unified.to Data Platform Unified integration API connecting customer-authorized business tools (e.g. CRM) to agents. United States Records from customer-connected systems, including names, emails, and activity data.
Paystack Payment Processing Payment processing for commerce transactions completed through customer agents in supported African markets. Nigeria with Stripe-group infrastructure Customer email; payment and transaction data (card data is held by Paystack).
Nuitee Travel Travel Hotel-booking fulfilment for travel-agent deployments. Global infrastructure Guest names; email addresses; booking details.
Better Stack Monitoring Log aggregation, tracing, alerting, uptime monitoring. Receives a stream of application and infrastructure telemetry. European Union (Better Stack EU region) for log storage control plane includes US hops IP addresses; user identifiers (where logged); request metadata; alert payloads; application stdout.
Functional Software, Inc. Monitoring Application error tracking for production services. European Union (EU data residency) Error events and stack traces, which may include user identifiers, IP addresses, and request metadata.
Slack Technologies, LLC Communications Internal real-time messaging. Used for engineering on-call coordination, incident channels, general internal communication, and notifications of inbound leads and sign-ups. United States Names and email addresses; message content (may include personal data when staff discuss customer matters); lead and sign-up contact details posted into internal channels; channel metadata; file uploads.
Linear Orbit, Inc. Productivity Issue tracking, sprint planning, support-issue triage routing. United States Names and email addresses of users; ticket content (which may reference personal data when describing customer issues); attachments.
Letsdeel, Inc. HR HRIS, payroll, contractor management, employer-of-record (for some jurisdictions). United States HQ with regional sub-processors per Deel's matrix Employee names; personal email and phone; home address; date of birth; national IDs / tax IDs; bank details; employment contract; salary and benefits; performance notes; leave and sickness records.
Stripe Payments Europe, Ltd. Payment Processing Payment processing for customer invoices. Stripe holds the card data; Lua holds only Stripe customer/subscription identifiers. Ireland for European Stripe operations United States for some global flows Billing contact name; billing email; billing address; VAT/tax ID; payment-method tokens (not card numbers); invoice line items.
HubSpot, Inc. CRM Marketing CRM, newsletter sends, demo-request capture and meeting-scheduling embeds. United States Names; business email; job title; company; consent records; engagement events; unsubscribe state.
PostHog Inc. Analytics Product analytics for the Lua console (customer-staff usage) and, with your opt-in consent, visitor analytics on heylua.ai. United States (PostHog US Cloud) Pseudonymous user identifier; page-view and feature events; user-agent; truncated IP (last octet removed); timestamps.
Apollo.io Sales With your opt-in to advertising cookies, company-level identification of heylua.ai visitors (which organisation a visit comes from), for B2B sales follow-up. Person-level identification is switched off. United States IP address; user-agent; page URLs and referrer; campaign (UTM) parameters; an anonymous visitor identifier held in browser local storage.
The Ghost Foundation CMS Blog and newsletter membership for heylua.ai content. United States (Ghost(Pro) managed hosting) Email addresses; names; subscription state.
StackBlitz, Inc. Developer Tools Interactive code-tutorial environment embedded on the heylua.ai /learn page. United States IP addresses; user-agent; embed cookies and local storage of /learn visitors.

Your data may flow beyond direct subprocessors. Click to expand and see the chain.

Loading data flow...

No changes recorded yet. Changes will appear here after the next scan detects updates.