Sub-processors
Last updated: 2026-10-27
Lastmod uses a small number of third parties to run the service. This page lists the ones that process customer data on our behalf, what they process, and where. We update it before a new provider starts processing, not after.
Google Search Console and Google Analytics 4 are deliberately not on this list: they are sources you grant us access to, not parties acting on our behalf — their role and our Limited Use commitment are described in our privacy policy. Services we use only to retrieve public data, and which receive no personal data, are not sub-processors and are not listed either.
1. Current sub-processors
Each of these processes customer data today. “Location” is where the data is stored and processed, not where the company is registered.
| Sub-processor | Purpose | Data | Location | Transfer basis |
|---|---|---|---|---|
| Neon | Database hosting | Customer account and website data | EU — Germany | None needed (EU) |
| Railway | Application hosting | Customer data while it is being processed | EU — Netherlands | None needed (EU) |
| Vercel | Website and web application hosting | Session and request data | EU — Germany; platform logs may be stored outside the EU | EU Standard Contractual Clauses |
| Cloudflare | DNS, CDN and security; storage of reports and feedback attachments | Request metadata; report files; files and screenshots attached to feedback | Storage in the EU; global edge network | EU Standard Contractual Clauses |
| Sentry | Error monitoring | Pseudonymous identifiers and error context | EU — Germany | None needed (EU) |
| Resend | Transactional e-mail, and e-mail you asked for (such as the free check's results and tips) | Name, e-mail address, message content | EU — Ireland; account metadata may be stored outside the EU | EU Standard Contractual Clauses |
| Mollie | Payments and invoices | Company name, address, country, VAT or KvK number and invoice e-mail address; payment details you enter yourself on Mollie’s payment page | EU — Netherlands | None needed (EU) |
| Anthropic | AI analysis: explanations of opportunities, text suggestions and suggested AI-visibility questions | Page URLs, titles, meta descriptions and headings, search queries from your Search Console (these can occasionally contain a name), measurement results and competitor data; for the free check, the public text of the homepage that was checked | United States; the provider keeps the data for up to 30 days | EU Standard Contractual Clauses in the provider’s data processing agreement |
| External SEO data provider | Search result observations, Google Ads keyword data, comparisons of search terms with competitors, backlink counts, the sites that link to competitors and observations of AI assistant answers | Search queries from your Search Console (these can occasionally contain a name), the questions you track for AI visibility, the market you set, the URLs of your pages and the domain names of your website and its competitors | EU — Estonia | EU Standard Contractual Clauses in the provider’s data processing agreement |
2. Changes and notice
We update this page before a new sub-processor starts processing customer data. Customers on a written agreement are notified in advance and can object. Contact: privacy@lastmod.ai.