DRAFT FOR COUNSEL REVIEW. This page has not been reviewed by a lawyer and is not final.
Sub-processors
DRAFT FOR COUNSEL REVIEW. Entries marked Planned are not yet in production use.
These are the companies that may handle customer data for FactWise. To request our data processing agreement, email privacy@factwise.io.
| Company | What it does | Data involved | Location | Status |
|---|---|---|---|---|
| Stripe, Inc. | Card check at sign-up and subscription payments, using Stripe's own hosted card fields. | Card brand, last 4 digits, expiry and a fingerprint; billing email. Card numbers never reach FactWise servers. | United States | Planned |
| Hosting and managed PostgreSQL provider | Runs the website, API, scheduled jobs and the database. | All customer data, encrypted by FactWise before storage for tax IDs and documents. | United States (required) | Planned |
| Email delivery provider | Sends sign-in links, bid alerts and account notices. | Recipient email address and message text. | United States (required) | Planned |
| Slack Technologies, LLC | Staff alerts about system health and security events. | No personal data: alert text never contains emails, names or IP addresses. | United States | Planned |
| GitHub, Inc. | Source code hosting and dependency update notices. | Source code only. No customer data is stored in the repository. | United States | In use |
- No sub-processor is owned, headquartered or controlled in China, Russia, North Korea or Iran, and none supplies covered telecommunications or video equipment under Section 889.
- We will tell customers with a signed data processing agreement before adding or replacing a sub-processor.
- FactWise does not use an AI service to process customer data.