This registry identifies service providers that may process Personal Information for Level. A provider receives only the information needed for its role and only when the applicable product, feature, or business process uses that provider.
Not every provider below is a subprocessor for every customer. Advertising providers may act as independent businesses or controllers rather than processors. Customer-directed integrations are not Level subprocessors merely because a customer connects them.
Infrastructure, Storage, and Delivery
- Advanced Data: data center services.
- Bunny.net (BunnyCDN): content delivery and storage.
- Wasabi: object storage.
- Vultr: cloud infrastructure.
- Vercel: website hosting, serverless infrastructure, and content storage.
- Neon: website content database infrastructure.
- Ably: real-time messaging infrastructure.
Customer Operations and Communications
- Stripe: payment processing and subscription management.
- Intercom: customer support and documentation.
- Mailgun: email delivery.
- Twilio: SMS delivery and network traversal services.
- Microsoft: business email, calendar, meetings, and collaboration.
- Basecamp by 37signals: project and support collaboration.
- MeetingBaaS: meeting recording and transcription when enabled.
Security, Reliability, and Product Analytics
- Sentry: error reporting.
- AppSignal: application performance monitoring.
- Mezmo: centralized logging.
- ipstack: IP geolocation and security signals.
- Segment: product analytics and marketing website data routing.
- PostHog: marketing website analytics and campaign measurement.
- Google Tag Manager and Google Analytics: marketing website tag management, analytics, and campaign measurement.
Artificial Intelligence Services
- Anthropic, OpenAI, OpenRouter, and xAI: model and routing services selected according to the enabled feature or task.
Advertising and Campaign Measurement
Level uses Google advertising services and Reddit on the marketing website for campaign measurement and advertising. Depending on the provider, configuration, and applicable law, these providers may act as independent businesses or controllers. They are not used to observe Customer Content or Endpoint activity in the authenticated Level product.
Changes and Notice
Level updates this registry when a provider is added, removed, or assigned a materially different processing role. Notice and objection rights for a new subprocessor are governed by an executed Data Processing Addendum.
Customers without an executed Data Processing Addendum may request subprocessor-update notices by emailing support@level.io. The request should identify the Level workspace and the email address that should receive notices.
Revision History
- August 24, 2026: Initial standalone registry. The providers previously listed in the Privacy Policy were moved here without changing their stated roles.
Contact
Questions about this registry or requests for a Data Processing Addendum may be sent to support@level.io.