> For the complete documentation index, see [llms.txt](https://legal.lampi.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://legal.lampi.ai/sub-processors-notice.md).

# Sub-Processors Notice

This Sub-Processors Notice details the current sub-processors that Lampi AI has authorized to handle customer personal data as part of Lampi AI's services, in accordance with Lampi AI's Data Processing Addendum (DPA).

## 1. Infrastructure providers

| Sub-processor   | Processing activities | Location of data processing | DPA                                                                                                                |
| --------------- | --------------------- | --------------------------- | ------------------------------------------------------------------------------------------------------------------ |
| Microsoft Azure | Data hosting          | Paris, France, Europe       | [Link](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) |

## 2. LLM Providers

| Open-source models vs LLM Providers                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| <p>At Lampi, our primary focus is to ensure security and privacy by design when providing AI-related services to Customers. To maintain robust control over data flows, Lampi AI offers to  use: </p><ul><li>open-source models (on-demand)</li><li>LLM providers. </li></ul><p></p><p>Open-source models can run on our infrastructure hosted by infrastructure providers located in Europe, allowing us to maintain complete control over data processing activities. This means that Customer Data remains within Lampi's secure environment.</p><p></p><p>All LLM Providers available on the Platform apply a Zero Data Retention policy.</p><p></p><p>Customers have the flexibility to select any available large language model when interacting with AI agents. When Customers opt for Third-Party Models from a Third-Party Services provider, some data will flow to the Third-Party to process your request. </p> |

| Sub-processor                     | Processing activities                                                                                                                   | Location of data processing            | DPA                                                                                                                |
| --------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------- | ------------------------------------------------------------------------------------------------------------------ |
| Microsoft Azure  Foundry (OpenAI) | Data processing and generation - Microsoft applies a Zero Data Retention Policy on all data, and does not use it for training purposes. | EU / US (depending on model selection) | [Link](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) |
| Google, Inc.                      | Data processing and generation - Google applies a Zero Data Retention Policy on all data, and does not use it for training purposes.    | EU                                     | [Link](https://ai.google.dev/gemini-api/terms?hl=fr)                                                               |

## 3. Other service providers

| Sub-processor | Processing activities                   | Location of data processing | DPA                                                                                    |
| ------------- | --------------------------------------- | --------------------------- | -------------------------------------------------------------------------------------- |
| Hubspot       | Internal client management (CRM)        | USA                         | [Link](https://legal.hubspot.com/dpa)                                                  |
| Stripe        | Payment processor for specific features | Paris, France, Europe       | [Link](https://stripe.com/fr/legal/dpa)                                                |
| Docusign Inc. | Contract Management                     | USA                         | [Link](https://www.docusign.com/legal/terms-and-conditions/data-protection-attachment) |