Sub-processors
Last updated: 2026-10-15
Apliteni OÜ (registry code 14296961), the company operating Lepsto (formerly Lessly), engages the third-party processors listed below ("sub-processors") to help provide the service. Each processes customer data only for the purpose stated below; see each entry's DPA column for its data processing agreement status. This list covers all Lepsto products.
| Vendor | Role | Data processed | Region | Transfer safeguard |
|---|---|---|---|---|
| Google Cloud Platform | Hosting, compute, databases, object storage, secrets, AI inference (Vertex AI / Gemini) | All customer and end-user data processed by the platform | EU (europe-west4, Netherlands; Vertex AI in the EU multi-region) | none (EU processing) |
| GitHub (Microsoft Ireland Operations Ltd) | Source-code connector, OAuth sign-in | Account identity (name, email), OAuth tokens, repository metadata | EU / global (Microsoft Ireland contracting entity) | DPF-certified (Microsoft) |
| Amazon Web Services (Amazon SES) | Transactional email delivery through Lepsto Mail | Recipient email address, message content | EU (eu-north-1, Stockholm) | none (EU processing) |
| Inngest | Workflow orchestration | Workflow event payloads (may include account identifiers) | US | SCCs (Art. 46 GDPR) |
| Anthropic PBC | LLM inference (Claude) for the natural-language analytics service — text-to-SQL and answer summarization | End-user analytics questions (free text, unredacted, may contain personal data) and query result rows. Result rows are person-level — one row per tracked profile, product end user (including waitlisted signups) or mail contact — and the queryable views carry normalised email and phone columns for person-graph identity resolution, so a result row may carry a direct identifier | US | SCCs (Art. 46 GDPR) |
| Cal.com | Scheduling Enterprise "Contact us" calls from the pricing page | Name, email address, company and meeting topic supplied by the person booking | US | US processing. Lepsto has not confirmed the transfer safeguard applicable to its Cal.com account. |
Announced
The following sub-processors have been announced and will not begin processing customer data before the date shown.
| Vendor | Role | Data processed | Region | Transfer safeguard | Processing starts |
|---|---|---|---|---|---|
| Stripe | Payment processing (activates with billing) | Payment card (last4), billing name and email, Stripe customer id | EU / US | DPF-certified + SCCs (known US exception) | to be announced |
How we announce changes
We announce a new sub-processor on this page at least 30 days before it begins processing customer data. An announced sub-processor appears above with the date its processing is scheduled to start.
To be notified of changes to this page by email, write to privacy@lepsto.com.