Legal
Sub-processors
Version 1.0 · Last updated 7 July 2026
To deliver the LeakIQ platform, LeakIQ Ltd engages a small number of third-party sub-processors. This page lists them, the data each handles and where it is located. It forms part of the Data Processing Agreement in the Master Subscription Agreement.
1. Overview
A sub-processor is a third party engaged by LeakIQ to process customer personal data on LeakIQ's behalf. LeakIQ keeps its sub-processor list deliberately small, engages each one only where necessary to provide the service, and ensures each is bound by data protection obligations equivalent to LeakIQ's own. All customer data is stored within the EU.
2. Current sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting & serverless runtime | Request metadata; no persistent customer data stored | EU edge; US company (SCCs / DPF) |
| Neon Inc. | PostgreSQL database | All persistent workspace and customer data | EU — AWS eu-west-1 (Ireland) |
| Resend Inc. | Transactional email delivery | Recipient email address and notification content | EU processing; US company (SCCs / DPF) |
| Stripe, Inc. | Billing & payment processing | Subscription and billing data only; no revenue-recovery data | EU / UK processing; global company (SCCs / DPF) |
Where a sub-processor is a non-UK/EU company, transfers are covered by appropriate safeguards such as Standard Contractual Clauses and, where applicable, the EU-US / UK-US Data Privacy Framework.
3. Changes and notification
- LeakIQ notifies customers of any intended addition or replacement of a sub-processor at least 30 days in advance.
- Customers may object on reasonable data-protection grounds during that period; LeakIQ will work in good faith to address the concern.
- To receive change notifications, email support@leakiq.io and ask to be added to the sub-processor updates list.
4. Sub-processor obligations
Each sub-processor is engaged under a written agreement that imposes data protection obligations equivalent to those LeakIQ owes its customers, including confidentiality, appropriate technical and organisational security measures, and restrictions on the use of customer data. LeakIQ remains responsible to its customers for the performance of its sub-processors.
For related documents, see the Data Retention & Deletion Policy and the Trust Center.