Material Subprocessors

Who helps LORIQ
operate the service.

A public, function-specific directory of material providers and related services. It is maintained separately so provider information can stay current without rewriting the Privacy Policy.

This page is available without a workspace account. Providers are listed by function and scope; not every listed provider is solely LORIQ's Subprocessor. LORIQ does not infer or promise a processing region, and this directory does not authorize processing inconsistent with the Agreement or Privacy Policy.

Directory status: current launch list · maintained separately from the immutable Privacy Policy text

Core material providers

Replit

Hosting and managed infrastructure

Information involved
Customer Data, account and security information, documents, and operational records
Scope
Application operation, managed database storage, private document storage, and managed AI access. App Storage is identified as GCS-backed.

OpenAI — through Replit-managed AI access

Managed AI processing

Information involved
Submitted prompts, relevant financial or document context, page images where the function uses them, and generated outputs
Scope
AI processing is provided through Replit-managed access. This directory does not represent a direct LORIQ account or contract with the upstream model provider.

Resend

Email delivery

Information involved
Recipient and contact information plus message contents needed for enabled service, notification, requested-copy, and opted-in marketing communications
Scope
Used for enabled email delivery. Configuration evidence is not a representation that every production message has been successfully delivered.

Cloudflare, Inc. — R2

Encrypted backup storage

Information involved
Backup content and object metadata, which may include Customer Data and operational records selected for backup
Scope
Cloudflare R2 encrypts stored objects and metadata at rest using AES-256 with Cloudflare-managed keys. Backup retention and deletion remain subject to the Agreement and Privacy Policy.

Related and conditional services

GitHub

Source-code hosting and version control

Information involved
Application source code, repository metadata, and contributor account and activity information
Scope
Used for application code and development collaboration. This listing does not represent GitHub as a production database or a customer-document backup destination.

Stripe

Payment and billing services

Information involved
Billing contacts, transaction and subscription identifiers, payment status, and limited returned payment-method information
Scope
Roles depend on the applicable service and terms. Stripe activities are not automatically classified as solely a Subprocessor or solely an independent controller. Payment availability and existing sandbox gates are unchanged.

Customer-connected services

Optional, customer-authorized integrations

Information involved
Information exchanged as reasonably necessary for an enabled connection
Scope
QuickBooks, NetSuite, Microsoft SharePoint/OneDrive, and organization-selected identity providers are supported conditionally. Code support does not mean every customer or production account has enabled a connection.

Google Fonts and OpenStreetMap tile services

Browser resources

Information involved
Ordinary browser request information; map tile requests identify the requested map area
Scope
These resource requests do not receive a customer's financial record. The inspected map path does not send property addresses to an external geocoder.

Public reference sources that do not receive confidential records are not material Customer Data Subprocessors merely because LORIQ retrieves reference information from them. Provider names identify the services used and do not imply endorsement or partnership. All trademarks belong to their respective owners.

Read the Privacy PolicyRequest a current listAsk about provider changes