LightBox Sub-Processors
Effective starting 04/30/2025
LightBox uses the third-party entities listed below (each, a “sub-processor”) to process personal data on behalf of LightBox customers in accordance with contract terms between LightBox and the sub-processor, ensuring compliance with LightBox’s commitments in its Data Processing Addendum.
LightBox conducts annual compliance reviews of its sub-processors. LightBox requires its sub-processors to implement appropriate technical and organizational measures to ensure that the processing of personal data meets the standards mandated by relevant data protection regulations.
The list below includes sub-processors for LightBox’s generally available services. For each sub-processor, the processing of personal data occurs according to the retention periods outlined in the customer agreement and any relevant product documentation. Additional details on sub-processor security measures can be requested by contacting compliance@lightboxre.com.
All Products
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Salesforce | customer support and account management | United States |
| Invoiced | customer payment platform | United States |
| CyberSource | payment processing | United States |
| Intacct | payment processing | United States |
| HubSpot | customer relationship management (CRM) | United States |
| Atlassian/Jira | development tickets related to support cases | United States |
RIMS/RIMSCentral
Product/Service: RIMS/RIMSCentral
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| AWS | cloud hosting | United States |
| Intercom | customer support platform | United States |
| ZenDesk | customer service and technical support | United States |
| Pendo | end user behavior analysis and notification service | United States |
Product/Service: RIMS
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Boxwood Means, LLC | evaluation report provider | United States |
| Ascribe | evaluation report provider | United States |
| First American | evaluation report provider | United States |
| InsightSoftware (Logi AdHoc/Logi Symphony) | customer report generator | United States |
| CoreLogic | flood zone certification report | United States |
| UCDP (FannieMae and Freddie Mac GSE’s and FHA) | facilitate reviews from FannieMae and Freddie Mac GSE’s and FHA on residential appraisals | United States |
| Eval.com | evaluation report provider | United States |
Product/Service: RIMSCentral
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| PayPal | payment processing | United States |
Valuation
Product/Service: Valuation
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Rackspace | cloud hosting | United States |
| Pendo | end user behavior analysis | United States |
| ZenDesk | customer service and technical support | United States |
| Intercom | customer support and cloud-based in-app support chat platform | United States |
| Okta | authentication services | United States |
Broker RCM and Deal Center
Product/Service: my.rcm1.com
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Rackspace | on-premises hosting | United States |
| Amazon Web Services (AWS) | Cloud Hosting | United States |
| TransPerfect | Machine generated language translations. | United States |
| Pendo | In-platform marketing announcements. | United States |
| Intercom | Communication service platform. | United States |
| eNom | Domain name registration. | United States |
| authorize.net | Payment gateway. | United States |
| MS Azure | data archival | United States |
Product/Service: www.rcm1.com
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| WP Engine | Website host | United States |
| Live Chat | Communication service platform. | United States |
| authorize.net | Payment gateway | United States |
Collateral360 and PARCEL
Product/Service: Collateral360 &PARCEL
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| AWS | cloud hosting | United States |
| Intercom | customer support and cloud-based in-app support chat platform | United States |
| Okta | authentication services | United States |
| Pendo | end user behavior analysis and notification service | United States |
Product/Service: Collateral360
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| First American | evaluation report provider | United States |
| CoreLogic | flood zone certification report | United States |
| Boxwood Means, LLC | evaluation report provider | United States |
| Clear Capital | evaluation report provider | United States |
| Appraisal Nation | evaluation report provider | United States |
| DataDog | application monitoring | United States |
| Kibana | application monitoring | United States |
| quiktrak | evaluation report provider | United States |
| ServiceLink | flood zone certification report | United States |
| ASC.gov | license validation | United States |
Product/Service: PARCEL
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Pusher | report editing and collaboration | United States |
ClientLook
Product/Service: www.clientlook.net
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Microsoft Azure | cloud hosting | United States |
| Intercom | communication service platform. | United States |
| Authorize.net | payment gateway | United States |
| chargify | payment gateway | United States |
| WP Engine | website host | United States |
Product/Service: www.clientlook.net
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Live Chat | Communication service platform. | United States |
| Authorize.net | payment gateway | United States |
| chargify | payment gateway | United States |
| WP Engine | Website host | United States |
ESA Data Packages
Product/Service: ESA Data Packages
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Pendo | Application usage metric tracking | United States |
| Okta | Authentication services | United States |
| PayPal | Retail Sanborn payment processor | United States |
| Intercom | customer support and cloud-based in-app support chat platform | United States |
| Dock360 | cookie tracking | United States |
Location Based Data
Product/Service: LightBox Vision and Spatial Stream
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Amazon Web Services (AWS) | cloud hosting | United States |
Product/Service: LightBox API
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Apigee/ Google Cloud Platform (GCP) | cloud hosting | United States |
Product/Service: Developer Portal
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Okta | authentication services | United States |
| Apigee/ Google Cloud Platform (GCP) | cloud hosting | United States |
| Amazon Web Services (AWS) | cloud hosting | United States |
Product/Service: Location Hub Services
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Microsoft Azure | cloud hosting | United States |
Product/Service: ArcGIS Online, Broadband, SmartFabric, Feature Service Delivery Mechanism
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Esri | cloud hosting (GIS) | United States |
Product/Service: Bulk data delivery (CanMap, SmartFabric, SmartParcel, Building Footprints & Building Addresses, Third-party data, builder sites, data coverage interactive map, SmartFabric add-ins)
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Microsoft Outlook | data delivery mechanism | United States |
| Salesforce | Data delivery notification and communication process | United States |
Product/Service: Snowflake Delivery Mechanism
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Snowflake | Data delivery | United States |
Revere
Product/Service: Revere CRE
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Google Cloud Platform (GCP) | cloud hosting | United States |
| Snowflake | data analytics | United States |
To see what’s changed, click here.