Subprocessors
Last Updated: 6/28/19
As part of our compliance with GDPR, we provide a list of our subprocessors and keep this updated when new subprocessors are added to help us deliver services to our customers.
| Vendor | Description | Handles User Data? | DPA | URL | Vendor Links |
| AWS | Hosting | Yes | Yes – part of service agreement | https://console.aws.amazon.com/console | https://aws.amazon.com/blogs/security/aws-gdpr-data-processing-addendum/ |
| Stripe | Payment processing | Yes | Yes – part of service agreement | https://stripe.com/ | https://stripe.com/dpa/legal |
| Mailchimp | Mailing lists | Yes | Yes – part of service agreement | https://mailchimp.com/ | https://mailchimp.com/legal/data-processing-addendum |
| Mailgun | Outgoing email | Yes | Yes – In vendor folder | https://www.mailgun.com/ | https://www.mailgun.com/gdpr |
| Crisp | Real-time support | Yes | Yes – In vendor folder | https://crisp.chat/en/ | https://crisp.chat/en/terms/ |
| GoDaddy | Domain registration service | No | https://www.godaddy.com/ | NA | |
| Cloudflare | DNS and DoS protection | No | https://www.cloudflare.com/ | NA | |
| GitLab | Ticketing, source code management | No | https://gitlab.com/performance-culture | https://about.gitlab.com/terms/ | |
| Geoplugin | IP-based filtering | No | https://www.geoplugin.com/ | NA | |
| AppCues | User Onboarding and Tips | Yes | Part of Service Agreement | https://www.appcues.com/ | https://docs.appcues.com/article/443-gdpr-deletion-api |
| Twilio | 2FA texts | No | https://www.twilio.com/ | NA |