This document was last updated 16 May 2025
Effective date: 16 May 2025
This page forms an integral part of the Data Processing Addendum ("DPA") between Lana Commerce, Inc. ("Lana") and the Merchant. Merchant provides general written authorization for Lana to engage third-party Sub-processors to Process Merchant Personal Data on Merchant's behalf. The Sub-processors currently engaged by Lana and authorized by the Merchant are listed below.
Current Sub-processors
| Category | Sub-processor Name | Service Provided | Primary Location(s) of Processing |
|---|---|---|---|
| Cloud Infrastructure & Hosting | Google LLC / Google Cloud Platform (GCP) | Cloud hosting, data storage, and infrastructure services for the Lana platform. | USA |
| Cloud Infrastructure & Hosting | Cockroach Labs, Inc. | Distributed SQL database for platform data persistence. | USA (Google Cloud Platform) |
| Error Monitoring & Performance | Functional Software, Inc. d/b/a Sentry | Application error tracking and performance monitoring. | USA |
| Payment Processing (for Lana's billing to Merchants) | Stripe, Inc. | Processing of subscription fees and other charges payable by Merchants to Lana. (Note: Stripe also acts as a primary payment processor for Merchant's end customer transactions, under a direct agreement between Merchant and Stripe). | Global |
| Analytics (for Lana's own website & platform usage) | Google Analytics | Website and platform usage analytics for Lana's internal purposes to improve its Services. | Global |
| Communication & Notification Services | SendGrid (a Twilio, Inc. company) | Email delivery services (e.g., for transactional emails, platform notifications to Merchants). | Global |
| Communication & Notification Services | Twilio, Inc. | SMS notification services (e.g., for platform alerts or two-factor authentication for Merchants, if applicable). | Global |
| Internal Operations & Productivity | Google Workspace | Internal email, document storage, and collaboration tools for Lana personnel. | USA |
| Internal Operations & Productivity | Xero Limited | Accounting and financial management software for Lana's own business operations. | USA |
| Address Validation & Verification | Melissa Data Corporation (Melissa, Inc.) | Address validation, verification, and data quality services. | Global |
| Security Services | MaxMind, Inc. | IP intelligence, geolocation data services (e.g., for fraud prevention, analytics, content personalization). | Global |
| Security Services | Let's Encrypt - Internet Security Research Group (ISRG) | SSL/TLS certificate provision and management for securing web communications. | USA |
Updates to this List
Lana will maintain this page as an up-to-date list of its Sub-processors. This list may be updated by Lana from time to time. Lana will provide Merchants with notice of any new Sub-processor(s) before authorizing such new Sub-processor(s) to Process Merchant Personal Data, in accordance with Section 5.1 of the DPA, thereby giving Merchant the opportunity to object.
Get started for free