Subprocessors
To run Loxmetis we rely on a small set of trusted infrastructure and service providers ("subprocessors"). This page lists each one, what it does, and what data it may receive. We use these providers only to deliver the service — never to sell your data or for advertising.
Core providers
These providers are part of how Loxmetis runs for every account.
| Provider | Purpose | Data it may receive | When |
|---|---|---|---|
| Google (Gemini API) | AI chat responses and document search embeddings | Document text and chat queries from the active case | Always |
| Cloudflare | Document storage (R2), application/marketing hosting, bot protection | Uploaded case documents; IP addresses on public forms | Always |
| Railway | Application hosting, PostgreSQL database, Redis cache | Application data, as the underlying infrastructure host | Always |
| Stripe | Subscription billing and payments | Billing contact, organization, payment details. Card numbers are entered directly with Stripe — Loxmetis never stores them. | Paid plans |
| Resend | Transactional email (invites, verification, password reset) and our waitlist/updates list | Email addresses and display names | Always |
Optional providers
These are used only when a specific feature is enabled for your deployment. If a provider below is not turned on, it receives no data.
| Provider | Purpose | Data it may receive | When |
|---|---|---|---|
| Modal Labs | Document OCR and machine-learning embeddings/reranking | Document text and page images | When enabled |
| Google / Microsoft | Optional single sign-on (SSO) | Your email and basic profile from the identity provider you choose | If you use SSO |
| GitHub | In-app product feedback is filed as a tracking issue | Your feedback text, with case- and firm-identifying details removed | When you submit feedback |
| LlamaParse (LlamaIndex) | OCR fallback for scanned PDFs | Scanned PDF page images | When enabled |
| PostHog | Product analytics | Non-identifying usage events (no personal information) | When enabled |
| Sentry | Error tracking | Error events and limited request context | When enabled |
| Honeycomb (OpenTelemetry) | Performance tracing | Request timing/trace spans (no document content) | When enabled |
Public-record lookups
For some features Loxmetis queries public legal-records services (such as CourtListener and the Caselaw Access Project). We send search terms to those services — not your client or case data — so they are data sources, not subprocessors.
We do not sell your personal information or share it for advertising. See our Privacy Policy for how we handle your data, and our Security & Trust page for our security controls. Questions about a provider? Contact privacy@loxmetis.com.
We may add or change subprocessors as the product evolves. Material changes are reflected here and, for significant changes, communicated to account holders.