Sub-Processors
ARIA by Luminant Works Global Limited
| Published by | Luminant Works Global Limited |
|---|---|
| Last Updated | 1 March 2026 |
| Contact | privacy@luminantglobal.com |
As described in our Privacy Policy (Sections 4.2 and 13), ARIA uses a limited number of third-party sub-processors to deliver the service. Each sub-processor is selected with care, bound by appropriate data processing agreements, and contractually required to implement security measures at least equivalent to those we apply ourselves.
We will update this page whenever a sub-processor is added or removed. Enterprise customers under a Data Processing Addendum (DPA) will receive advance notification of any changes as specified in their agreement.
AI Model Providers
| Sub-Processor | Purpose | Data Processed | Location | Date Added |
|---|---|---|---|---|
| Anthropic, PBC | Large language model provider (Claude) | User prompts and session context transmitted for AI response generation. Not used for model training. | United States | 1 March 2026 |
| OpenAI, Inc. | Large language model provider (GPT) | User prompts and session context transmitted for AI response generation. Not used for model training. | United States | 1 March 2026 |
Infrastructure & Hosting
| Sub-Processor | Purpose | Data Processed | Location | Date Added |
|---|---|---|---|---|
| Railway Corporation | Cloud application hosting and managed PostgreSQL database | All application data including account data, session data, and engagement records. Encrypted at rest and in transit. Railway is SOC 2 Type II certified. | United States | 1 March 2026 |
Communications
| Sub-Processor | Purpose | Data Processed | Location | Date Added |
|---|---|---|---|---|
| Twilio Inc. (SendGrid) | Transactional email delivery | Email address and email content (verification codes, account notifications). Not used for marketing without consent. | United States | 1 March 2026 |
Analytics & Geolocation
| Sub-Processor | Purpose | Data Processed | Location | Date Added |
|---|---|---|---|---|
| MaxMind, Inc. | IP geolocation lookup (GeoLite2 database) | IP addresses resolved to country-level location. Database runs locally within ARIA infrastructure; no data transmitted to MaxMind. | Local (database file only) | 1 March 2026 |
Note: We do not use any marketing, advertising, or behavioural analytics sub-processors. We do not share personal data with data brokers or for cross-context behavioural advertising.
For questions about our sub-processors, to request a copy of any relevant Data Processing Agreement, or to be notified of future changes, please contact privacy@luminantglobal.com.