Subprocessors
Last updated: August 14, 2026. The third parties that process customer data on loyd's behalf, and what each one is for. Referenced from our Privacy Policy.
Two commitments that apply to everyone on this list
- Each provider may process data only to deliver its service to us, under a written agreement with confidentiality and security obligations.
- No provider on this list may use your content to train or improve AI or machine learning models, and none of them receives your data for their own independent purposes.
| Provider | What it does | Data involved | Processing region |
|---|---|---|---|
| Google Cloud Platform | Hosting, database, file storage, logging, and secret management. | All service data, including account data, records, conversations, and uploaded files | United States |
| OpenAI | AI model inference for drafting, summarizing, extraction, and scheduling | The conversation and the specific context needed to answer a request | United States |
| Anthropic | AI model inference, and the web search behind research answers | The conversation and the specific context needed to answer a request; search terms derived from your request | United States |
| WorkOS | Authentication and sign-in | Name, email address, and sign-in events | United States |
| Stripe | Payment and subscription processing | Billing contact and payment details. We never receive or store full card numbers. | United States |
| Resend | Delivery of transactional and product email that loyd sends from its own address | Recipient address and message content | United States |
| Twilio | SMS delivery and phone number verification | Phone number and message content | United States |
| Linq | Delivery of loyd's text-message conversations | Phone number and message content | United States |
| Google Maps Platform | Resolving a venue name to an address when a meeting has a location | The venue or location text from a request | United States |
| Typeform | Access-request and intake forms on our website | What you submit in the form, such as name, email, and role | United States |
| Google Analytics | Website analytics, loaded only if you consent | Device and usage data from our marketing website, with IP anonymization enabled | United States |
Google Cloud Platform
What it does
Hosting, database, file storage, logging, and secret management.
Data involved
All service data, including account data, records, conversations, and uploaded files
Processing region
United States
OpenAI
What it does
AI model inference for drafting, summarizing, extraction, and scheduling
Data involved
The conversation and the specific context needed to answer a request
Processing region
United States
Anthropic
What it does
AI model inference, and the web search behind research answers
Data involved
The conversation and the specific context needed to answer a request; search terms derived from your request
Processing region
United States
WorkOS
What it does
Authentication and sign-in
Data involved
Name, email address, and sign-in events
Processing region
United States
Stripe
What it does
Payment and subscription processing
Data involved
Billing contact and payment details. We never receive or store full card numbers.
Processing region
United States
Resend
What it does
Delivery of transactional and product email that loyd sends from its own address
Data involved
Recipient address and message content
Processing region
United States
Twilio
What it does
SMS delivery and phone number verification
Data involved
Phone number and message content
Processing region
United States
Linq
What it does
Delivery of loyd's text-message conversations
Data involved
Phone number and message content
Processing region
United States
Google Maps Platform
What it does
Resolving a venue name to an address when a meeting has a location
Data involved
The venue or location text from a request
Processing region
United States
Typeform
What it does
Access-request and intake forms on our website
Data involved
What you submit in the form, such as name, email, and role
Processing region
United States
Google Analytics
What it does
Website analytics, loaded only if you consent
Data involved
Device and usage data from our marketing website, with IP anonymization enabled
Processing region
United States
Accounts you connect are not subprocessors
When you connect a Google or Microsoft account, loyd reads and writes in your account using the permissions you granted. Those providers are not processing data on our behalf, they are holding your own data for you, and your relationship with them governs it. What we ask for and why is itemized on our permissions page.
What we run ourselves
Our observability and AI-tracing stack is self-hosted inside our own Google Cloud project rather than sent to a third-party vendor. That means the prompts and outputs behind a loyd response, and our application logs, stay within the infrastructure listed in the first row of this table.
Changes to this list
We keep this page current as we add, remove, or replace providers. Business customers under a data processing agreement can request advance notice of changes and a copy of the agreement at privacy@loyd.ai.
Questions
Email privacy@loyd.ai or support@loyd.ai.