Version 1.0 · current as of 28 June 2026
This page lists the sub-processors lumi engages to deliver the service.
A sub-processor is a third party that processes data on lumi's behalf (for
example, hosting, email delivery, or AI-generated analysis). lumi remains
accountable for any sub-processor's handling of data under the Data Sharing
Agreement (DPA).
| Purpose | Sub-processor | Location & transfer | Safeguards |
| --- | --- | --- | --- |
| AI-generated analytical summaries (AI Insights) | Anthropic PBC | United States — UK GDPR transfer safeguards (SCCs / UK Addendum) | Data-processing agreement; processes only aggregated/derived figures (no individual salaries); no training on inputs; zero/limited retention under commercial API terms |
| Application hosting | Amazon Web Services (AWS) | United Kingdom / EEA region | Data-processing agreement (AWS DPA) |
| Transactional email | Amazon SES (AWS) | United Kingdom / EEA region | Data-processing agreement (AWS DPA) |
Members who have accepted the DPA will be notified of additions to this list
in line with the DPA's change-notification terms.