Subprocessor List

Lextiff, operated by Canvas Chrome Designs, engages a limited number of trusted third-party service providers ("Subprocessors") to assist in delivering the Services.

This page identifies the Subprocessors that may process Customer Data while providing the Lextiff platform.

All Subprocessors are evaluated prior to engagement and are contractually required, where applicable, to implement appropriate safeguards for the protection of Customer Data.

What Is a Subprocessor?

A Subprocessor is a third-party service provider that Processes Customer Data on behalf of Lextiff in order to provide, support, secure, or improve the Services. Examples include cloud infrastructure providers, email delivery providers, payment processors, and authentication providers.

Lextiff remains responsible for the performance of its Subprocessors to the extent required under applicable law and our agreements with Customers.

Current Subprocessors

This list reflects Subprocessors actively used in production to process Customer Data. Providers under evaluation or used only for internal development and staging are not included until they are engaged in production processing of Customer Data.

Categories of Data That May Be Processed

Depending upon the Services used, Subprocessors may process:

• • User account information
• • Authentication information
• • Contact information
• • Customer Data
• • Uploaded documents
• • Email addresses
• • Phone numbers
• • Billing information
• • Payment transaction metadata
• • Audit logs
• • Technical logs
• • Infrastructure logs

Subprocessors only receive the minimum information reasonably necessary to perform their services.

How We Select Subprocessors

Before engaging a Subprocessor, Lextiff evaluates factors including:

• • Security practices
• • Reliability
• • Privacy commitments
• • Regulatory compliance
• • Data protection capabilities
• • Service availability
• • Business continuity
• • Contractual safeguards

Where appropriate, Subprocessors are required to enter into contractual agreements designed to protect Customer Data.

Changes to Subprocessors

Lextiff may add, replace, or remove Subprocessors from time to time as the Services evolve.

When material changes occur that may affect the Processing of Customer Data, Lextiff will update this page and, where required by applicable law or contractual commitments, provide Customers with reasonable notice.

The Last Updated date at the top of this page reflects the most recent revision.

International Processing

Some Subprocessors may process Customer Data outside the Customer's jurisdiction.

Where cross-border transfers are subject to Applicable Data Protection Laws, Lextiff implements appropriate safeguards designed to support lawful international transfers.

Additional information is available in our:

Security Expectations

Lextiff requires Subprocessors, where applicable, to maintain security measures appropriate to the services they provide. These measures may include:

• • Encryption in transit
• • Encryption at rest where applicable
• • Access controls
• • Confidentiality obligations
• • Security monitoring
• • Incident response procedures
• • Business continuity practices

Lextiff periodically reviews its Subprocessors to help ensure they continue to meet our operational and security expectations.