Subprocessors
These are the categories of outside service providers that help us operate. The specific vendor names are being confirmed by our board before they are published here.
Last updated: September 13, 2026
Who touches our data
Hosting and database platform
Runs the website, database, file storage, and sign-in
Information handled: All application data, encrypted in transit and at rest
Email delivery provider
Sends notifications, support replies, and receipts
Information handled: Name, email address, message contents
Payment processor
Processes donations
Information handled: Name, email, payment details (card numbers never reach us)
Google Workspace
Staff email, shared calendar, and documents
Information handled: Staff email and calendar contents
Banking data provider
Imports bank transactions into our accounting records
Information handled: Organization bank transactions (no client data)
Telephony provider
Office phone and text messaging
Information handled: Phone numbers and message contents
AI assistant provider
Answers internal staff questions from our own documentation
Information handled: Staff questions and internal documentation (no client or donor records)
Changes
When we add or remove a provider that handles personal information, we update this page. Providers that may touch health-related information sign an agreement with us first.