It is easy to get lost in the minutiae of privacy policies and terms of service, but what matters most is the values driving the policies. You can read our values around data here. You can also refer to our Privacy Policy, our Terms of Service and our Data Processing Agreement.
AUTHORIZED SUB-PROCESSORS
Last Updated: August 28, 2026
| Sub-Processor | Purpose | Location | Data Types Processed |
| PostHog | Product analytics and session recording | United States | Usage Data and anonymized interaction data (session recordings configured to mask donor names, dollar amounts, committee names, FEC identifiers, and other sensitive fields) |
| Stripe | Payment processing | United States | Customer billing and payment information only |
| Geocodio | Address verification and geocoding | United States | Donor and contributor mailing addresses |
| Google Cloud Services (GCS) | Cloud infrastructure and hosting | United States | All Customer Data as infrastructure provider |
| Anthropic (Claude) | AI-assisted internal operations (research, content drafting, data analysis, software development) | United States | Limited access to Customer Data subject to anonymization requirements; model training on inputs and outputs contractually disabled |
| Google (Gemini via Google Workspace) | AI-assisted internal operations | United States | Limited access to Customer Data subject to anonymization requirements; model training on inputs and outputs contractually disabled |
| Jira (Atlassian) | Internal engineering and project management | United States | Stores limited Customer Data included in support and engineering tickets relating to specific transactions. |
Application services processing Personal Data
| Sub-Processor | Purpose | Location | Data Types Processed |
| Clerk, Inc. | Identity and access management: user authentication, multi-factor authentication, organization-based tenancy, and session management for authorized platform users | United States | Authorized user names, email addresses, organization membership and role, authentication events and session metadata. Does not receive donor records |
| Functional Software, Inc. d/b/a Sentry | Application error monitoring, performance tracing, and session replay for both the backend API and the web application | United States | Error and performance telemetry including request headers, user IP addresses, request and response payloads, and application state captured at the time of an error, which may contain Personal Data within Customer Data; frontend session replay recordings |
| Google LLC (Google Maps Platform — Places API, Address Validation API) | Address autocomplete and validation as authorized users enter addresses in the web application | United States | Partial and complete mailing addresses |
| Slack Technologies, LLC (Salesforce, Inc.) | Operational alerting on processing job status, and the interface for Processor’s internal compliance assistant | United States | Job status notifications carrying account identifiers, timing, and error types only, by design and enforced in code; and free-text questions submitted by Processor personnel through the compliance assistant |
Business operations and engineering tooling
Vendors in this section support Processor’s internal operations. They do not receive Personal Data in the ordinary course, but may incidentally receive it where Processor personnel include it in a support ticket, a diagnostic attachment, or a code artifact.
| Sub-Processor | Purpose | Location | Data Types Processed |
| GitHub, Inc. (Microsoft Corporation) | Source code hosting, code review, and continuous integration (GitHub Actions) | United States | Application source code and infrastructure configuration. No production Personal Data; continuous integration runs against synthetic test data |
| Anysphere, Inc. (Cursor) | AI-assisted software development environment used by Processor’s engineering personnel | United States | Application source code; incidental access to Customer Data where present in a developer’s local environment, subject to Processor’s internal AI policy. Model training on inputs and outputs contractually disabled on all company-managed accounts |
| AgileBits Inc. (1Password) | Credential and secret management for Processor personnel | United States/Canada | Processor credentials only. No Customer Data |
Last Updated: August 28, 2026
