Subprocessor List
Last updated August 12, 2026
Lakop uses the following providers or provider categories to operate the service. A provider processes customer personal data only when its function or an enabled integration requires it.
Core service providers
- Lakop-managed hosting infrastructure — United States: application hosting, PostgreSQL database, encrypted object storage, backups, queues, metrics, logs, and self-hosted error tracking.
- Transactional email provider — United States: delivery of invitations, receipts, operational notices, and merchant-directed messages.
- Twilio — United States and global network: SMS delivery when a merchant enables and sends SMS.
Merchant-selected connected providers
- Stripe — United States and global: storefront payment processing, connected-account onboarding, payouts, refunds, and disputes.
- eBay — United States and global: marketplace authentication, listings, orders, buyer fulfillment data, inventory updates, and account-deletion notices.
Scope and changes
Connected providers are independent controllers for much of their processing and are also governed by their own terms and privacy notices. Lakop does not send workspace data to an integration that the merchant has not enabled.
We will update this list before a new subprocessor begins materially different processing and provide account notice where required. DPA customers may object as described in the Data Processing Addendum. Questions: privacy@lakop.app.