Sub-processors & Third-Party Services
Last updated: May 30, 2026
In accordance with GDPR Article 28, we maintain a complete and up-to-date list of all sub-processors that may access or process personal data on behalf of LawMate. All sub-processors are subject to data processing agreements and are bound to the same data protection standards we uphold.
AI Data Commitment: LawMate's AI features operate under a Zero Data Retention policy. Your documents, matters, and client communications are never used to train AI models — ours or any third party's.
Supabase
Database & AuthenticationPrimary database, real-time subscriptions, and user authentication. Hosts all matter data, client records, and time entries.
Vercel
Cloud Hosting & CDNWeb application hosting, serverless API functions, and global content delivery.
Resend
Transactional EmailSending account notifications, demo request confirmations, security alerts, and beta selection emails.
Stripe
Payment ProcessingProcessing subscription payments and invoicing. LawMate does not store full card numbers; all payment data is handled by Stripe directly.
Anthropic (Claude)
AI Language ModelPowering AI-assisted document drafting, matter summarization, and intelligent insights. Operates under a Zero Data Retention agreement — no client content is used for model training.
PostHog
Product AnalyticsAnonymous product usage analytics to understand feature adoption. Only activated with user consent. No personally identifiable information is included in analytics events.
Object to a Sub-processor
Under GDPR Article 28(2), customers have the right to object to our use of a specific sub-processor. To exercise this right, contact us at privacy@lawmate.site. We will work with you to find an appropriate resolution. Note that some sub-processors are essential to the operation of the service.