Sub-processor List
1. Introduction
This Sub-processor List identifies the third-party entities that Lenera AI Inc. ("Lenera AI") engages to process personal data on behalf of its customers in connection with the Lenera AI video creation platform (the "Service"). A "sub-processor" is a third-party data processor engaged by Lenera AI to process personal data that Lenera AI itself receives as a data processor on behalf of a customer.
This list is accurate as of the Last Updated date shown above. Lenera AI reviews and updates this list as sub-processor relationships are added, changed, or terminated. Customers who have signed a Data Processing Agreement ("DPA") with Lenera AI are entitled to receive 30 days' advance written notice of any new sub-processor or material change to an existing sub-processor, as set out in Section 5 of the DPA. Customers wishing to subscribe to change notifications should contact support@lenera.ai.
All sub-processors listed herein are required, by contract, to implement appropriate technical and organizational security measures to protect personal data and to process personal data only as instructed by Lenera AI and only to the extent necessary for the sub-processor to perform its services.
2. What Is Not a Sub-processor
For clarity, the following categories of third-party providers are NOT included in this Sub-processor List because they do not process Customer personal data on Lenera AI's behalf:
- Internal business tools: Providers of tools used solely for Lenera AI's internal operations (e.g., team communication platforms, banking, payroll, and HR systems) that have no access to Customer personal data.
- Anonymized or aggregate data only: Providers that receive only anonymized, de-identified, or aggregated data from which individual users cannot reasonably be identified.
- Professional advisors: Legal counsel, accountants, and auditors who access data under duties of confidentiality as independent controllers, not processors.
- Infrastructure utilities: Low-level infrastructure providers (e.g., internet service providers, DNS providers) that provide conduit services without accessing the content of data in transit.
3. Current Sub-processors
The following table lists all current sub-processors engaged by Lenera AI to process Customer personal data as of the Last Updated date above.
4. DeepSeek Data Transfer Notice
International Data Transfer Warning — China (DeepSeek)
Script prompts and narration text submitted to DeepSeek for AI script generation and voice synthesis are processed in China. The People's Republic of China does not have an EU adequacy decision from the European Commission. Lenera AI relies on Standard Contractual Clauses (SCCs) where required under the GDPR to govern this transfer, but notes that the legal efficacy of SCCs for transfers to China remains unsettled under current EU regulatory guidance. Lenera AI does not store DeepSeek outputs beyond the processing session. Rendered output is stored by Lenera AI's own infrastructure (AWS/Vercel), not by DeepSeek. Customers subject to GDPR, those operating in regulated industries (healthcare, financial services, legal), or those with internal data residency or sovereignty requirements should carefully review this transfer prior to use. For questions or to discuss alternative configurations, contact support@lenera.ai before using the Service.
5. Questions and Objections
For questions about this Sub-processor List, to submit a formal objection to a sub-processor change, or to subscribe to future sub-processor change notifications, please contact:
- Email: support@lenera.ai
- Website: www.lenera.ai
- Mailing Address: Lenera AI, Inc. | 28 Geary St STE 650 Suite #620, San Francisco, California 94108, United States
This Sub-processor List is an annex to the Lenera AI Data Processing Agreement and is incorporated by reference therein. It is also published publicly at lenera.ai/legal/subprocessors as a transparency measure for all users of the Service.
Last updated: September 2026