Kumo Leads — Sub-processors

Last updated: August 18, 2026

Kumo Leads uses the vendors below to operate the Service. Any information that is sub-processor will be subject to sub-processor privacy policies. Each is bound by contractual confidentiality and data-protection obligations, processes data only to provide its service to us, and operates in the United States.

Sub-processor	Purpose	Data it processes	Location
Anthropic	AI classification and field extraction from uploaded files; detection of personal information in documents	Contents of files a customer uploads, and any personal information in them	United States
Auth0 (Okta)	Identity and authentication; sign-in with Microsoft work accounts	Account user email address, name, authentication events	United States
Amazon Web Services (SES)	Delivery of transactional and notification email	Recipient email address, name, message content	United States
Cloudflare	CDN, WAF and DDoS protection; hosting of the embeddable form worker; R2 object storage for uploaded files	All traffic in transit; form submissions; stored files	United States
DigitalOcean	Application hosting and managed PostgreSQL database	All customer and lead data at rest	United States
Sentry	Application error monitoring	Error context, which may include a user identifier and request details	United States
Stripe	Subscription billing, payment processing, and sales-tax calculation	Billing contact, billing address, payment card details (held by Stripe, never by us), invoice records	United States

Notes

Anthropic. Data submitted through Anthropic's API is not used to train its models. Limited retention applies for trust-and-safety purposes.

Stripe. Payment card details are captured directly by Stripe. Card numbers never reach Kumo systems.

Customer-directed integrations. Where a customer connects the Service to another platform — a storefront, a call-tracking provider, an advertising platform — that provider is engaged by the customer, not by us, and is not a sub-processor of Kumo.

Changes

We will give at least 30 days' notice before adding a sub-processor that processes lead data. Customers may subscribe to notices at subscribe@kumosoftware.com and may object as described in the Data Processing Addendum.