Subprocessors

Thorn Street, Inc. currently uses the following companies to process personal data on our behalf to provide Leif and our other Services. Each one is bound by a written contract that limits its use of the data to providing services to us and requires it to protect the data. This page is the Subprocessor list referred to in our Data Processing Addendum (https://thornstreet.com/dpa).

Subprocessor	Location	What it does
Amazon Web Services, Inc.	United States (Oregon, us-west-2)	Hosting, computing, databases, file storage and logs; email for sign-in codes and account messages (Amazon SES); AI text embeddings (Amazon Bedrock); maps, geocoding, places and routing (Amazon Location Service)
Anthropic, PBC	United States	The AI models that power Leif: the content of a user's threads is sent to them to carry out the user's requests
Stripe, Inc.	United States	Payments, subscriptions and invoices
Brave Software, Inc.	United States	Web search: the search queries Leif makes for a user
Perplexity AI, Inc.	United States	Web search: the search queries Leif makes for a user

Services you choose to connect

These are not our subprocessors: they are your own accounts, which Leif works with when you sign in with them or connect them. Their own terms and privacy policies apply.

Service	What it's for
Google	Sign in with Google; and Google Drive, if a user connects it: the files they pick, including Google Docs, Sheets and Slides, which Leif can read, edit and create
Microsoft	Sign in with Microsoft
Esri (ArcGIS)	ArcGIS Online or an organization's ArcGIS Enterprise portal, if a user connects it: Leif searches and reads their organization's layers, and publishes results to their account as new private hosted feature layers when they ask

Data providers

To answer your requests, Leif also sends queries to data providers, such as map, geocoding and open-data services. Those queries can contain personal data if your request does. Our Data Sources page at https://thornstreet.com/data-sources explains what they receive, and the terms that come with their data.

Changes

Thorn Street may add, replace or stop using subprocessors at any time, as our business and the Services change, for example to use a different AI model, cloud or payment provider. This page always lists the subprocessors we use, and we update it before a new one starts processing personal data. Customers with a Data Processing Addendum are notified as it describes, and may object on reasonable data protection grounds. To be told of changes, email privacy@thornstreet.com.