Sub-processor List

LeadFlow (KSTUDIO SIA) engages the following third-party sub-processors to deliver its services. Each sub-processor is bound by data protection obligations no less protective than those in our Data Processing Addendum.

Last updated: March 6, 2026

We provide at least 30 days' prior notice before adding or replacing a sub-processor. Customers may object on data-protection grounds within 10 days of notice. See DPA §7 for the full process.

SupabaseRequired

Database, authentication, and managed Postgres. Stores platform data and lead results.

EU-West (Frankfurt, Germany)
EEA (no transfer mechanism required)
Apollo.ioRequired

Contact enrichment via API. Provides professional and company data for lead generation.

USA / Global
SCCs and/or EU-U.S. Data Privacy Framework (DPF)
ApifyOptional· Enrichment feature

Website and LinkedIn enrichment workflows. Automated data extraction and enrichment.

EU / Global
SCCs (where transfer outside EEA occurs)
MillionVerifierOptional· Email verification feature

Email address verification. Validates deliverability of email addresses in lead lists.

EU (Hungary, Sweden)
EEA (no transfer mechanism required)
Google (Sheets / Drive)Optional· Google Sheets export feature

Export delivery and file storage. Delivers lead exports via Google Sheets or Drive.

Global (may include USA)
SCCs and/or EU-U.S. Data Privacy Framework (DPF)

Certain service providers may also process personal data where KSTUDIO SIA acts as an independent controller (e.g., billing, transactional email, analytics). That processing is described in our Privacy Policy, not this list. For questions about this list or to object to a sub-processor change, contact us via our contact page.