Legal

Sub-processors

Last updated: 8 October 2026

Laminir engages the third-party providers below to deliver the Service. Each is bound by contractual obligations to process data only on our instructions and to maintain appropriate security.

Current sub-processors

Vercel →United States

Cloud hosting and application infrastructure

Data processed: All data transiting the application; application logs

Clerk →United States

Authentication and identity management

Data processed: User names, email addresses, authentication metadata

Airtable →United States

Database and structured data storage

Data processed: Trading data, briefs, retailer configuration, recipient email addresses

Make.com (Celonis) →United States (US2 region)

Workflow automation — moves data between systems and runs the weekly intelligence pipeline

Data processed: Trading data in transit, retailer configuration

OpenAI →United States

AI and language model provider — generates commentary and agent outputs

Data processed: Aggregated trading metrics and strategic context submitted for analysis

Anthropic →United States

AI and language model provider — strategy extraction and summaries in Align

Data processed: Strategic plans, KPIs and aggregated performance submitted for analysis

Resend →United States

Transactional email delivery — briefs, notifications and service messages

Data processed: Recipient email addresses, brief content

Stripe →United States

Subscription billing and payments

Data processed: Billing contact name, email address and payment details

Shopify →Canada / United States

Connected commerce platform — source of authorised trading and inventory data

Data processed: Sales, product and inventory data accessed via API under your authorisation

Connected point-of-sale system — source of authorised trading and inventory data

Data processed: Sales, stock, purchase order and receipt data accessed via API under your authorisation

Google Cloud (BigQuery) →Your BigQuery dataset's region

Connected data warehouse — source of authorised marketing performance data

Data processed: Aggregated channel, campaign and product attribution metrics, read-only under your authorisation. Laminir holds no data in Google Cloud.

Where your data is processed

Laminir operates from Australia. Our sub-processors operate primarily in the United States, and your data is stored and processed there. For customers in Australia, this constitutes a disclosure of personal information to overseas recipients under Australian Privacy Principle 8. Overseas recipients may not be subject to privacy laws equivalent to the Australian Privacy Principles.

Full detail is set out in our Privacy Policy.

Changes to this list

We will update this page when we add or replace a sub-processor. Where a change materially affects the processing of your data, we will provide reasonable notice to active customers by email.

To be notified of changes, or to request a Data Processing Agreement, contact privacy@laminir.com.

laminir© 2026