We use the third-party providers below ("sub-processors") to process personal data on our behalf so we can run the service. Each one is engaged under a contract that limits its use of the data to providing its service to us. This list is referenced by our Privacy Policy and our Terms of Service, and we keep it current. When we add or replace a sub-processor, we update this page.
Live in production
The providers we use to run the service today.
| Sub-processor | Purpose | Data shared | Location |
|---|---|---|---|
| Heroku (Salesforce, Inc.) | Application hosting and database | All Customer Data, at rest and in transit | United States |
| Amazon Web Services (S3) | Document and file storage | Uploaded documents (leases, receipts, signed PDFs) and their metadata | United States |
| Stripe, Inc. | Subscription billing and rent payments (Connect) | Billing contact and payment tokens. We store no full card or bank numbers. | United States |
| Cloudinary Ltd. | Image and document upload, processing, and delivery | Listing and property photos, work-order photos, company logos, and applicant document uploads (IDs, pay stubs) | United States |
| BoldSign (Syncfusion, Inc.) | Lease e-signature | Signer name and email, and the lease document being signed | United States |
| Resend | Transactional email delivery | Recipient email and name, and message content | United States |
| Anthropic, Inc. | AI-powered in-app assistant and suggestions | Operator queries and the records they reference. We do not use Customer Data to train AI models. | United States |
| Google LLC (Google Analytics 4) | Public-website analytics, only with your consent | Usage and device data and a pseudonymous analytics identifier, plus coarse IP-derived location. No Customer Data, and not loaded on signed-in pages. | United States |
| Twilio Inc. | Inbound call forwarding and voicemail | Caller phone number, and voicemail audio and transcription | United States |
Integrated, not yet live
These providers are part of the platform but the feature that uses each one is not yet serving customers. We list them here so the picture is complete. Each moves to the list above when its feature ships.
| Sub-processor | Purpose | Data shared | Location |
|---|---|---|---|
| SingleKey | Tenant background and credit screening (consumer-reporting agency) | Applicant-provided screening information, submitted directly to SingleKey. We store no raw Social Security numbers and keep no full reports. | United States |
| Bird (MessageBird) | SMS notifications to tenants | Phone number and message content | United States |
| QuickBooks Online (Intuit Inc.) | Accounting sync to your own connected QuickBooks Online company | Financial summary data you choose to sync: rent income, expenses, and security deposits | United States |
| Sentry (Functional Software, Inc.) | Application error monitoring | Technical error and crash data. We do not send IP addresses, cookies, or request contents. | United States |
Where your data is processed
We operate the service in the United States, and the sub-processors above process data in the United States.
Notice of changes
We update this page when we add or replace a sub-processor. To be notified of changes, write to [email protected]. You can also request a copy of any executed data-processing agreement for your own compliance review.
Related documents
Our Privacy Policy describes how we collect, use, and share personal information and how data-subject rights work. Our security center describes the controls we run to protect that data, including our SOC 2 readiness program, encryption posture, and incident-response approach.