Version: 2026-07-30 · v1.0
HarnessRouter Subprocessors
Published at: https://harnessrouter.ai/legal/subprocessors
This page lists the subprocessors and service providers that Lumentree Corporation ("Lumentree") engages to help provide HarnessRouter. It is the current, authoritative Subprocessor List referenced by our Privacy Policy and our Data Processing Addendum. We update this page as our providers change, and we notify DPA customers of changes through the notice and objection process in the DPA, Section 8.3.
This page identifies our providers so you have transparency about who helps operate the Services. For providers that act as our subprocessors, we remain responsible for their performance of the data-processing obligations required by our DPA, as set out in DPA Section 8. This page does not make us responsible for a provider's independent controller activities, or for future third-party services a Customer selects or connects through a customer-directed provider-account configuration, which would be governed by those providers' own terms, as described in our Terms of Service.
Current subprocessors
| Provider (legal entity) | Purpose | Location | Effective / change date |
|---|---|---|---|
| Microsoft Corporation — Microsoft Azure (including Azure OpenAI Service) | Cloud hosting, compute, storage, and AI model processing for the Services | United States | 2026-07-30 |
| Stripe, LLC | Subscription payment processing | United States | 2026-07-30 |
| Vercel Inc. | Marketing website hosting and website analytics | United States | 2026-07-30 |
| Supabase, Inc. | Marketing website datastore (e.g., waitlist) | United States | 2026-07-30 |
| Routing/inference gateway provider (legal entity available to DPA customers on request via the notice channel below) | Routing and forwarding of requests to model or inference Providers on managed routes, on our behalf | United States | 2026-07-30 |
Our subprocessors fall into: (a) infrastructure providers (hosting, payments, analytics, datastore) and the routing backend, listed above; and (b) the model and inference providers used to process Customer Personal Data on managed routes, which are route-specific onward subprocessors identified in the Services or in a route-specific disclosure and treated, for DPA customers, as the authorized subprocessor list for those routes. If we later make a customer-directed Provider account configuration available, providers used through that configuration will act as independent third parties or the Customer's own processors under their own terms and will not be our subprocessors for that customer-directed use unless the applicable documentation or agreement expressly says otherwise. The 30-day advance-notice and objection process in the DPA, Section 8.3, applies to changes to this Subprocessor List, except that a change of routing backend on managed routes may be noticed by promptly updating this page, as Section 8.3 provides.
A provider that is not used in production to process data on our behalf is not listed. Model, cloud, and other Providers that a Customer selects or connects at its own direction through a future customer-directed provider-account configuration are governed by that Provider's own terms and are not our subprocessors merely because they are reachable through the Services.
Changes and notice
We may add, replace, or remove providers as the Services evolve. For customers under our DPA, we provide advance notice of new subprocessors and an opportunity to object, as described in the DPA, Section 8.3, except that a change of routing backend on managed routes may be noticed by promptly updating this page, as Section 8.3 provides. To receive change notices, contact us at contact@harnessrouter.ai.
Contact
Questions about this list: contact@harnessrouter.ai · Lumentree Corporation, 201 Spear Street, Suite 1100, San Francisco, CA 94105.