Legal
Subprocessors
Last updated: September 27, 2026
Longboard LLC ("Longboard") engages a small number of trusted third-party service providers ("subprocessors") to help us deliver the Longboard platform. Each processes personal information only on our behalf, under a written contract that limits its use of that information, and only for the purposes described below. This page reflects the subprocessors we use today; see our Data Processing Addendum for the contractual commitments that govern them.
Longboard stores the personal information processed through the platform in the United States. The table shows where each subprocessor processes it.
| Subprocessor | Purpose | Data processed | Location | Terms |
|---|---|---|---|---|
| Microsoft Azure Microsoft Corporation |
Cloud hosting and infrastructure — application hosting, database, file storage, and backups | All categories of personal information processed by the Services | United States | Privacy · DPA |
| Stripe Stripe, Inc. |
Payment processing, recipient onboarding, and payouts (Stripe Connect path) | Payment and identity information collected by Stripe directly; Longboard receives payout metadata only | United States | Privacy · DPA |
| Azure Communication Services Microsoft Corporation |
Transactional email — service notifications and verification codes | Recipient email address and the contents of transactional messages | United States | Privacy · DPA |
| Azure Notification Hubs Microsoft Corporation |
Push notifications to the Longboard mobile app | Device push token and notification content | United States | Privacy · DPA |
| Expo / EAS 650 Industries, Inc. |
Native mobile app build and distribution, and on-device push-token issuance | Mobile app build/delivery metadata and device push tokens | United States | Privacy · Terms |
| Anthropic Anthropic, PBC |
AI reading of shelf and display photos from tasting reports, where it is turned on for a brand | The photo, the brand's name, and the brand's product names and product pictures | United States for model inference and storage (see note) | Privacy · DPA |
Note on Anthropic. Longboard uses Anthropic's United States-only inference setting, so the model runs on US-based infrastructure, and Anthropic stores the data in the United States. Anthropic states that it may also process data for internal purposes, such as safety review, product support, or incident response, in countries where it or its affiliates operate.
Changes to this list
We update this page when we add or replace a subprocessor. Customers may request advance notice of changes as described in our Data Processing Addendum, and may object to a new subprocessor on the terms set out there.
Questions
Email privacy@longboard.surf.