LEGAL

Subprocessors

Last updated: 15 September 2026

To operate Pallas by Lonia AI, we engage the subprocessors listed below. Each processes personal data only as necessary for its stated function and under data-protection terms no less protective than those in our Data Processing Agreement. Certifications listed are those published by each provider.

Subprocessors engaged to operate Pallas. The first column names the provider; the remaining columns give its purpose, the data categories it processes, its processing location, and its published certifications.
Subprocessor	Purpose	Data categories	Location	Certifications
Supabase	Managed PostgreSQL database, authentication, and file storage	Account identity, organization data, scan findings, uploaded content (transient)	United States	SOC 2 Type II
Cloudflare	Static site and application hosting, Workers, DNS/CDN, and bot mitigation (Turnstile)	Request metadata, form submissions in transit, edge caching	Global edge network	SOC 2 Type II, ISO 27001
Stripe	Payment processing, checkout, and subscription billing	Billing contact, payment method (held by Stripe), transaction records	United States and EU	PCI DSS Level 1
Resend	Transactional and report email delivery	Recipient email address, email content (scan reports, notifications)	United States	SOC 2 Type II
Google	OAuth authentication provider only (sign-in). No customer data is stored with Google by Pallas.	Authentication assertion (name, email, profile photo) at sign-in	Global	SOC 2 Type II, ISO 27001
Microsoft	Azure AD OAuth authentication provider only (sign-in). No customer data is stored with Microsoft by Pallas.	Authentication assertion (name, email) at sign-in	Global	SOC 2 Type II, ISO 27001

Change Notification

We give customers at least 30 days' advance notice before a new subprocessor begins processing personal data, in accordance with GDPR Article 28. To receive these notifications, subscribe by emailing support@lonia.ai; enterprise customers can also request notices as a contractual commitment in their agreement.

Objecting to a Subprocessor (Opt-Out)

Each subprocessor above is essential to delivering a core function of the Service (hosting, database, payments, authentication, or email), so we cannot selectively disable an individual subprocessor for one customer while continuing to provide the Service. Your opt-out mechanism is therefore an objection right:

You may object to a newly announced subprocessor in writing within 14 days of our notice, stating the reasonable, good-faith data-protection grounds for the objection.
We will work with you to address the objection, for example by describing additional safeguards or an alternative configuration where one exists.
If we cannot resolve the objection, you may terminate the affected subscription without penalty for the unused, prepaid portion of the term, as your final opt-out remedy.
For OAuth providers (Google, Microsoft), you can also opt out at the individual level by choosing the other supported provider at sign-in.

To raise an objection or exercise this opt-out, contact support@lonia.ai.

Transfer Impact Assessment

Our Transfer Impact Assessment covering the sub-processor chain, encryption controls, contractual safeguards, and jurisdictional posture is published on the Procurement page.

Certifications listed above are each provider's own published certifications and belong to that provider, not to Lonia AI. Data locations and certifications reflect the providers' published information and may change; contact us for the current position for a specific onboarding review.