Legal
Sub-processors
Lead Source uses the following third-party services to process personal data on behalf of our customers. Each service is contractually bound by a Data Processing Agreement (DPA) and operates in accordance with applicable privacy law.
For questions about our sub-processors, email privacy@leadsource.co.
| Service | Purpose | Data location | DPA |
|---|---|---|---|
| Vercel | Application hosting and serverless API execution | United States (AWS us-east-1 / us-west-2) | Signed |
| Supabase | PostgreSQL database, authentication, and realtime infrastructure | United States (AWS ap-southeast-2 / us-east-1) | Signed |
| Stripe | Payment processing and subscription management | United States | Signed |
| SendGrid (Twilio) | Outbound transactional email (notifications, receipts, digests) | United States | Signed |
| Sentry | Error reporting (configured to scrub email addresses and PII) | United States | Signed |