Learn

Subprocessors

We use third-party services (subprocessors) to provide, maintain, and improve Lev. This page lists every subprocessor that may process customer data, what they do, what data they access, and where it lives.

Updated December 2025

19providers

7categories

USprimary region

SOC 2 Type IIGDPRHIPAADPA with every subprocessor

Infrastructure & Core Services

5 providers

Providers that host Lev's application, database, and file storage. All customer data is encrypted in transit and at rest.

AWS

Cloud compute, storage, database, and networking for the Lev platform.

Application dataEncrypted backupsLogs

MongoDB Atlas

Primary database for the email service, including metadata and message bodies.

Email metadataMessage content

Supabase

Object storage for user-uploaded documents and attachments.

DocumentsFile uploads

Redis

In-memory caching layer for sessions and short-lived application state.

Session tokensCache entries

Vercel

Static asset hosting and edge delivery for the Lev web app.

Static assetsRequest logs

Authentication

1 provider

Identity, single sign-on, and multi-factor authentication.

Auth0

Authentication, SSO, and MFA for every Lev user account.

User identityLogin eventsEmail address

AI & LLM Providers

4 providers

Large-language-model providers that power Lev's extraction, summarization, and assistant features.

OpenAI

Document extraction, embeddings, and note generation.

Document contentEmail textPrompts

Zero-retention enterprise endpoints; not used for training.

Anthropic

Complex reasoning and long-context document analysis.

Document contentPrompts

Zero-retention enterprise endpoints; not used for training.

Google Gemini

Document processing and multimodal understanding.

Document contentPrompts

Not used for training under Vertex AI terms.

Chunkr AI

Document layout analysis and structured parsing.

Document content

Every AI provider above is contractually configured so that customer prompts, documents, and completions are not used to train foundation models.

Email Integration

1 provider

The OAuth and sync layer that powers Lev's email features.

Nylas

Email API middleware: OAuth, sync, and inbox event webhooks.

OAuth tokensEmail headersEmail content

Monitoring & Operations

3 providers

Observability and secrets providers that keep the platform healthy. Logs and traces may include fragments of customer data from error contexts, and are retained for a limited period.

Datadog

Application monitoring, structured logs, and APM traces.

LogsMetricsTracesError contexts

Sentry

Error tracking with grouped stack traces and breadcrumbs.

Error dataStack traces

Doppler

Secrets management for internal API keys and credentials.

Internal credentialsAPI keys

Analytics & Product Intelligence

3 providers

Product analytics and customer-lifecycle tooling. Sensitive fields are masked or excluded from ingestion before being sent to these providers.

PostHog

Product analytics: events, funnels, and feature usage.

User eventsFeature usage

Segment

Unified analytics pipeline routing events to downstream tools.

User eventsIdentifiers

HubSpot

Marketing CRM, sales pipeline, and contact engagement.

Contact infoEngagement data

Internal Communication

2 providers

Tools we use internally that may incidentally handle customer communications or operational alerts.

Google Workspace

Internal email, calendar, and collaboration — inbox for support.

Support email threads

Slack

Internal messaging and on-call alerting for production errors.

Error notificationsIncident context

Changes to this list

We review this list quarterly and whenever a new provider is onboarded. Material changes — a new AI provider, a new region, or a new category of data being processed — are communicated to customers before they take effect.

To be added to the subprocessor notification list, email trust@lev.com. You’ll get 30 days’ notice before any new subprocessor begins processing customer data.

For security walkthroughs or vendor reviews, email trust@lev.com. For DPA or custom-terms requests, email legal@lev.com.