Sub-processors
Last updated: 29 July 2026
ReguLume uses the sub-processors below to deliver the service. Each is bound by data-protection terms consistent with our Data Processing Agreement. We will give notice before adding a new sub-processor so customers can object.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, storage, backups | All platform data (per-client isolated stores) | EU (Ireland), eu-west-1 |
| Anthropic | AI analysis (obligation extraction, mapping, copilot) via the Claude API | Regulatory text and relevant excerpts of customer content submitted for analysis | United States (SCCs; not used for model training) |
| OpenAI | Text embeddings for semantic search | Text excerpts submitted for embedding | United States (SCCs; not used for model training) |
| Stripe | Payment processing and subscription billing | Billing contact and payment metadata | United States and EU (Stripe Payments Europe, Ltd.) |
| Amazon Web Services (SES) | Transactional email (verification, notifications) | Recipient email address and message content | EU (Ireland), eu-west-1 |
| Plausible Analytics | Cookieless website traffic analytics (public site only) | Aggregated, non-identifying usage data (no cookies, no cross-site tracking) | EU (Germany); cookieless |
To subscribe to change notifications or raise an objection, contact info@regulume.com.