To deliver our services, LawTru Consulting relies on a small set of vetted third-party providers ("sub-processors") that may process personal information on our behalf. We require each to protect information consistent with our Privacy Policy and applicable law. This page lists our current sub-processors and the purpose and hosting region of each.
Current sub-processors
| Provider | Purpose | Hosting region |
|---|---|---|
| Supabase | Database, authentication, and private file storage | United States (AWS, Ohio) |
| Vercel | Application hosting, content delivery, and runtime logs | United States (Washington, DC) |
| Anthropic | AI narrative generation (Claude API) | United States |
| Browserless | Server-side rendering of report PDFs | United States |
| Resend | Transactional email delivery (invitations, notifications) | United States |
| Google Analytics | Usage analytics on public marketing pages only; suppressed when "Do Not Track" is set | Global (Google) |
All client and respondent data is processed in the United States. Where required, transfers to these providers from the EEA or UK rely on Standard Contractual Clauses or equivalent safeguards incorporated in each provider's data processing agreement.
We do not use advertising, retargeting, session-replay, CRM, newsletter, payment, or data-enrichment providers, and we do not accept file uploads from clients.
Changes and notice
We keep this list current and dated. When we add or replace a sub-processor that processes personal information, we will update this page and provide engagement clients with at least 30 days' notice, during which a client may raise a reasonable objection. To receive change notifications or to raise an objection, contact privacy@lawtruconsulting.com.