Subprocessors
Effective September 21, 2026. This page forms part of the Data Processing Addendum. We give 30 days’ notice before adding a subprocessor that will process personal information, and you can object.
Everything here is in the United States. There is no offshore processing, and no subprocessor receives data for any purpose of its own.
Active
Anthropic, PBC
United States- Purpose
- Large language model inference for marketing review, the compliance assistant, risk narratives and dashboard briefings.
- What it receives
- Document text, policy text and firm-level facts submitted for review. Anthropic's commercial terms state that Anthropic may not train models on customer content.
Voyage AI
United States- Purpose
- Text embeddings for semantic search over your rules and policies.
- What it receives
- Policy and rule text fragments. No brokerage or account data.
Railway Corp.
United States- Purpose
- Application hosting and managed PostgreSQL.
- What it receives
- All customer data at rest.
Railway Corp. (document volume)
United States- Purpose
- Persistent storage for reviewed advertisements and policy source files.
- What it receives
- Uploaded documents, retained as books and records.
Yahoo Finance (ticker lookup)
United States- Purpose
- Autocomplete for security symbols when filing a trade request.
- What it receives
- The search string typed into the ticker field. No personal or account data.
Not yet active
These integrations exist in the product but are not processing data today. Each moves to the list above, with notice, before that data flow begins.
Plaid Inc.
Planned, not yet processing- Purpose
- Brokerage account linking and transaction feeds for personal trading.
- What it would receive
- Access person and household member brokerage holdings and transactions. Credentials are entered into Plaid and are never seen by Luna. Note that for account-data access Plaid acts as a controller in its own right, under its own End User Privacy Policy and with its own direct relationship with the individual, rather than solely as Luna's processor. The individual can review and revoke the connection at Plaid directly.
Resend
Planned, not yet processing- Purpose
- Transactional email: obligation reminders, attestation requests, alerts.
- What it would receive
- Name, work email address, and the subject of the notification.
Slack Technologies
Only if you enable it- Purpose
- Optional notification delivery, only if your firm configures a webhook.
- What it would receive
- Notification text your firm chooses to route to Slack.
Getting notified
Email legal@lunacompliance.io and we will add you to the notification list for changes to this page. Your firm’s administrative contact is notified regardless.