Subprocessors
Effective date: May 27, 2026 · Last updated: May 27, 2026
This page identifies the third-party service providers ("subprocessors") that Lasair (Clearwater Digital LLC, a Nevis limited liability company) engages to assist in delivering the Services. Each subprocessor is bound by a written agreement requiring confidentiality, appropriate technical and organizational security measures, and prohibition on independent use of personal data.
We will provide thirty (30) days' advance notice of the addition of any new subprocessor that has material access to personal data, by posting the change on this page and updating the effective date. Customers may subscribe to subprocessor-change notifications by emailing privacy@lasair.ai with the subject "Subprocessor Notifications."
Current subprocessors
| Subprocessor | Function | Categories of data processed | Primary processing location |
|---|---|---|---|
| Microsoft Azure (Microsoft Corporation) | Cloud hosting and content delivery for the marketing website and account dashboard (Azure Static Web Apps), and serverless compute, database, cache, and key management for the Services backend (API, authentication, billing, and credit balance). | Account email, protected account credentials, account identifier, device registration data, session tokens, transient IP addresses, transient screen captures during query processing, query metadata, billing records, and website request data. | United States (backend, single region); global content-delivery network (website) |
| Dodo Payments | Payment processing, subscription billing, recurring payment management, and webhook event delivery for billing reconciliation. | Account email, billing details (handled directly by Dodo Payments; we do not see card numbers), subscription state, transaction amounts and timestamps, Dodo Payments customer identifier. | Handled by Dodo Payments |
| OpenRouter | Third-party API gateway used to access AI inference services. | Transient screen captures and query metadata, on a strictly per-request basis. Contractually prohibited from retaining query content or training on it. | United States |
| Anthropic, PBC | AI model inference. | Transient screen captures and query metadata, on a strictly per-request basis. Contractually prohibited from retaining query content or training on it. | United States |
| OpenAI, L.L.C. | AI model inference. | Transient screen captures and query metadata, on a strictly per-request basis. Contractually prohibited from retaining query content or training on it. | United States |
| Google LLC | AI model inference. | Transient screen captures and query metadata, on a strictly per-request basis. Contractually prohibited from retaining query content or training on it. | United States |
| Resend | Transactional email delivery (email verification, password reset, billing receipts). | Account email, email content for transactional messages. | United States |
Important notes
- No marketing or behavioral-tracking subprocessors. We do not use analytics platforms, advertising networks, customer-data platforms, marketing-automation tools, or behavioral-tracking pixels of any kind.
- No model training. No subprocessor is permitted to retain or use Customer Data (including screen captures, queries, or query responses) to train, fine-tune, or improve any artificial-intelligence or machine-learning model.
- Transient processing only. Screen captures exist only in transient memory during query processing. They are not written to durable storage at any stage. As soon as the response is streamed back to your device, all intermediate copies are discarded.
- International transfers. Where personal data is transferred from the European Economic Area, United Kingdom, or Switzerland to the United States or other jurisdictions, we rely on the European Commission's Standard Contractual Clauses (Commission Decision 2021/914) supplemented by additional technical and organizational measures, including encryption in transit and at rest.
For questions about this list, contact privacy@lasair.ai.