Subprocessors and data processing
Last updated November 6, 2026.
LUPASA, LLC uses the providers below to deliver Truman Planner. Each processes data only for the purpose stated, under a written agreement that requires confidentiality and security at least as protective as ours. We update this page before adding a provider that will process customer data; organizations that want notice by email of such changes can ask for it at [email protected].
| Provider | Purpose | Location |
|---|---|---|
| LUPASA, LLC (own infrastructure) | Hosting of the application, database and document storage | United States |
| Cloudflare, Inc. | DNS, TLS, network security, DDoS and bot protection, secure tunnel to our servers, inbound email routing | United States (global edge network) |
| Stripe, Inc. | Subscription billing, payment processing, invoices and receipts | United States |
| Anthropic, PBC | Model inference for suggested classifications and instrument reading, only where an organization enables those features; no training on customer data | United States |
| Microsoft Corporation (Azure) | Model inference through Microsoft Foundry where configured in place of the provider above, and planned application hosting | United States |
Data processing addendum
Organizations that need a signed data processing addendum, a Gramm-Leach-Bliley service-provider addendum, or a completed security questionnaire can request one at [email protected]. Our standard addendum covers the roles described in the privacy policy, the security measures described on the security page, breach notification, subprocessor notice, audit assistance and return or deletion of data on termination.
Where data lives
Customer data is stored and processed in the United States. Backups are encrypted and kept in the United States. The service is intended for US organizations.