LightBox Sub-Processors
Effective starting 05/06/2026
LightBox uses the third-party entities listed below (each, a “sub-processor”) to process personal data on behalf of LightBox customers in accordance with contract terms between LightBox and the sub-processor, ensuring compliance with LightBox’s commitments in its Data Processing Addendum.
LightBox conducts annual compliance reviews of its sub-processors. LightBox requires its sub-processors to implement appropriate technical and organizational measures to ensure that the processing of personal data meets the standards mandated by relevant data protection regulations.
The list below includes sub-processors for LightBox’s generally available services. For each sub-processor, the processing of personal data occurs according to the retention periods outlined in the customer agreement and any relevant product documentation. Additional details on sub-processor security measures can be requested by contacting compliance@lightboxre.com.
All Products
The following sub-processors may process customer data in connection with the delivery and administration of all LightBox products and services:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Salesforce | customer support and account management | United States |
| Intercom | customer support and cloud-based in-app support chat platform | United States |
| Invoiced | customer payment platform | United States |
| CyberSource | payment processing | United States |
| Intacct | payment processing | United States |
| HubSpot | customer relationship management (CRM) | United States |
| Atlassian/Jira | development tickets related to support cases | United States |
RIMS/RIMSCentral
The following sub-processors may process customer data in connection with the delivery and administration of RIMS:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Boxwood Means, LLC | evaluation report provider | United States |
| Ascribe | evaluation report provider | United States |
| First American | evaluation report provider | United States |
| InsightSoftware (Logi AdHoc/Logi Symphony) | customer report generator | United States |
| CoreLogic | flood zone certification report | United States |
| UCDP (FannieMae and Freddie Mac GSE’s and FHA) | facilitate reviews from FannieMae and Freddie Mac GSE’s and FHA on residential appraisals | United States |
| Eval.com | evaluation report provider | United States |
The following sub-processors may process customer data in connection with the delivery and administration of RIMSCentral:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| CyberSource | payment processing | United States |
The following sub-processors may process customer data in connection with the delivery and administration of both RIMS and RIMSCentral:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| AWS | cloud hosting | United States |
| Intercom | customer support platform | United States |
| ZenDesk | customer service and technical support | United States |
| Pendo | end user behavior analysis and notification service | United States |
Valuation
The following sub-processors may process customer data in connection with the delivery and administration of Valuation:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Amazon Web Services | cloud hosting | United States |
| Pendo | end user behavior analysis | United States |
| Intercom | customer support and cloud-based in-app support chat platform | United States |
| Okta | authentication services | United States |
| Doc360 | cookie tracking | United States |
PZR Zoning Reports
The following sub-processors may process customer data in connection with the delivery and administration of PZR:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Amazon Web Services | cloud hosting | United States |
| Invoiced | customer payment platform | United States |
Broker RCM and Deal Center
The following sub-processors may process customer data in connection with the delivery and administration of my.rcm1.com:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Rackspace | on-premises hosting | United States |
| Amazon Web Services (AWS) | Cloud Hosting | United States |
| TransPerfect | Machine generated language translations. | United States |
| Pendo | In-platform marketing announcements. | United States |
| Intercom | Communication service platform. | United States |
| eNom | Domain name registration. | United States |
| authorize.net | Payment gateway. | United States |
| MS Azure | data archival | United States |
| Figma | data archival | United States |
The following sub-processors may process customer data in connection with the delivery and administration of www.rcm1.com:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| WP Engine | Website host | United States |
| Live Chat | Communication service platform. | United States |
| authorize.net | Payment gateway | United States |
Collateral360 and PARCEL
The following sub-processors may process customer data in connection with the delivery and administration of Collateral360:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| First American | evaluation report provider | United States |
| CoreLogic | flood zone certification report | United States |
| Boxwood Means, LLC | evaluation report provider | United States |
| Clear Capital | evaluation report provider | United States |
| Appraisal Nation | evaluation report provider | United States |
| DataDog | application monitoring | United States |
| Kibana | application monitoring | United States |
| quiktrak | evaluation report provider | United States |
| ServiceLink | flood zone certification report | United States |
| ASC.gov | license validation | United States |
The following sub-processors may process customer data in connection with the delivery and administration of PARCEL:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Pusher | report editing and collaboration | United States |
The following sub-processors may process customer data in connection with the delivery and administration of both Collateral360 & PARCEL:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| AWS | cloud hosting | United States |
| Intercom | customer support and cloud-based in-app support chat platform | United States |
| Okta | authentication services | United States |
| Pendo | end user behavior analysis and notification service | United States |
ClientLook
The following sub-processors may process customer data in connection with the delivery and administration of www.clientlook.net:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Microsoft Azure | cloud hosting | United States |
| Intercom | communication service platform. | United States |
| Authorize.net | payment gateway | United States |
The following sub-processors may process customer data in connection with the delivery and administration of www.clientlook.com
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| WP Engine | website host | United States |
| Live Chat | Communication service platform. | United States |
| Authorize.net | payment gateway | United States |
ESA Data Packages
The following sub-processors may process customer data in connection with the delivery and administration of ESA Data Packages:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Pendo | Application usage metric tracking | United States |
| Okta | Authentication services | United States |
| PayPal | Retail Sanborn payment processor | United States |
| Intercom | customer support and cloud-based in-app support chat platform | United States |
| Dock360 | cookie tracking | United States |
| Salesforce | Customer tracking | United States |
Location Based Data
The following sub-processors may process customer data in connection with the delivery and administration of both LightBox Vision and Spatial Stream:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Amazon Web Services (AWS) | cloud hosting | United States |
The following sub-processors may process customer data in connection with the delivery and administration of LightBox API:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Apigee/ Google Cloud Platform (GCP) | cloud hosting | United States |
| Okta | authentication services | United States |
The following sub-processors may process customer data in connection with the delivery and administration of Developer Portal:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Okta | authentication services | United States |
| Apigee/ Google Cloud Platform (GCP) | cloud hosting | United States |
| Amazon Web Services (AWS) | cloud hosting | United States |
The following sub-processors may process customer data in connection with the delivery and administration of the Location Hub Services:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Microsoft Azure | cloud hosting | United States |
The following sub-processors may process customer data in connection with the delivery and administration of ArcGIS Online, Broadband, SmartFabric, and Feature Service Delivery Mechanism:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Esri | cloud hosting (GIS) | United States |
The following sub-processors may process customer data in connection with the delivery and administration of Bulk data delivery (CanMap, SmartFabric, SmartParcel, Building Footprints & Building Addresses, Third-party data, builder sites, data coverage interactive map, SmartFabric add-ins):
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Microsoft Outlook | data delivery mechanism | United States |
| Salesforce | Data delivery notification and communication process | United States |
| Okta | authentication services | United States |
The following sub-processors may process customer data in connection with the delivery and administration of Snowflake Delivery Mechanism:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Snowflake | Data delivery | United States |
Revere
The following sub-processors may process customer data in connection with the delivery and administration of both LightBox Live and Revere CRE:
| Sub-Processor | Purpose for Processing | Location |
|---|---|---|
| Google Cloud Platform (GCP) | cloud hosting | United States |
| Snowflake | data analytics | United States |
| PostHog | product analytics | United States |
To see what’s changed, click here.