Sub-Processor List
Last updated: 28 May 2026
Overview
LimeProspect is operated by Limelai Limited. To deliver our platform, we engage trusted third-party sub-processors who process personal data on our behalf. This page lists every sub-processor we currently use, what they do, where the data is processed and the safeguards in place for international transfers.
All sub-processors are bound by data processing agreements and are required to process personal data only in accordance with our instructions and applicable UK and EU data protection law.
Notice of Changes
We will provide at least 30 days' notice before adding, replacing or materially changing a sub-processor. To receive updates by email, send a request to privacy@limeprospect.com with the subject "Sub-processor updates".
Current Sub-Processors
| Processor | Purpose | Data Processed | Location | Safeguards | Privacy Policy |
|---|---|---|---|---|---|
| Supabase | Database hosting | Account data, prospect data, signals | EU (Frankfurt) | SCCs, encryption at rest | View policy |
| Clerk | Authentication | User accounts, sessions | US | SCCs, SOC 2 | View policy |
| Stripe | Payment processing | Billing data, payment methods | US/EU | SCCs, PCI DSS | View policy |
| Vercel | Application hosting | Request logs | EU (London/Frankfurt) | SCCs | View policy |
| Resend | Transactional email | Email addresses, message content | US | SCCs | View policy |
| OpenAI | AI text generation | Prospect summaries, outreach drafts | US | SCCs, no training on customer data | View policy |
| PredictLeads | Buyer signal enrichment | Company domains | US | SCCs | View policy |
| Google (Workspace APIs) | Gmail and Calendar integration | User OAuth tokens, email content | US/EU | SCCs | View policy |
| Microsoft (Graph API) | Outlook and Calendar integration | User OAuth tokens, email content | EU (UK) | SCCs | View policy |
| HubSpot | CRM sync | Contacts, companies, deals | EU/US | SCCs | View policy |
| Salesforce | CRM sync | Contacts, accounts, opportunities | US/EU | SCCs | View policy |
| Companies House (UK Government) | Public business register | Public company data | UK | N/A (public data source) | View policy |
| Google Analytics | Website analytics | Anonymised usage data | US | SCCs, IP anonymisation | View policy |
International Transfers
Where personal data is transferred outside the UK or European Economic Area, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses or other lawful transfer mechanisms recognised under UK GDPR. For more detail on transfer safeguards, see our Privacy Policy and GDPR Compliance pages.
Contact
Questions about our sub-processors or international data transfers? Contact our data protection team at privacy@limeprospect.com.