Benevity
Not listed by any tracked vendor.
Subprocessors
33 third parties, 1 affiliate. CSVof Benevity's subprocessors · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Adyen N.V. | Credit card payment processing for donors. May receive donor name, address and email only. Benevity does not collect, store or process any sensitive cardholder data (PAN, expiry, CVC) | US, EU (Adyen Privacy Statement) | |
| Amazon Web Services, Inc. | Data centre and cloud infrastructure as a service provider. Benevity manages encryption keys. AWS has no access to client data within Benevity-managed infrastructure; Infrastructure Hosting | EU; US (AWS Data Processing Addendum; EU SCCs / UK Addendum) | |
| Anthropic AI | Generative artificial intelligence support for Benevity systems and processes. Benevity does not use client data to build or train models. | Primarily stored in US; US, EU, AUS, Asia (Anthropic Data Processing Addendum; EU SCCs / UK Addendum) | |
| Atlassian Pty Ltd | Source code repository and ticketing system for production issues and changes. Atlassian has no access to client data within Benevity-managed infrastructure | US (Atlassian Data Processing Addendum; EU SCCs / UK Addendum) | |
| Bluesnap, Inc | Credit card payment processing for donors. May receive donor name, address and email only. Benevity does not collect, store or process any sensitive cardholder data (PAN, expiry, CVC); Payment processing | US and UK (Bluesnap Data Processing Addendum; EU SCCs / UK Addendum) | |
| Boomi, Inc | Platform integration cloud provider to manage Workday integration for payroll deductions. Benevity manages encryption keys. Boomi has no access to client data with Benevity infrastructure. (Applicable only to clients who have Workday Integration enabled) | US (Boomi Data Processing Addendum; EU SCCs / UK Addendum) | |
| Cloudinary | Image Hosting | EU & US (Cloudinary Data Processing Addendum) | |
| Courier, Inc | User notification preferences management software | US (Courier Data Processing Addendum; EU SCCs / UK Addendum) | |
| Docebo | Learning management system (LMS) capabilities and e-learning content within the Enterprise Impact Platform. | US (Docebo Data Processing Addendum; EU SCCs / UK Addendum) | |
| DocuSign, Inc | Document Signature services for Versaic and Grants applications. | US (DocuSign Data Processing Addendum; EU SCCs / UK Addendum) | |
| Foundever Operation Corp. | Subcontractor services to supplement Benevity Technical Support teams | Philippines; US, India, (EU SCCs / UK Addendum; Foundever website) | |
| Glia Intelligence | AI-powered process mining, workflow analysis and automation consulting. Glia Intelligence analyzes operational data (such as support logs and system documentation) using LLM-based synthesis to identify and design efficiency improvements for platform services. | US (EU SCCs / UK Addendum; Foundever website) | |
| Google, Inc. | Infrastructure as a service provider for Benevity Reporting Studio, including Looker Business Intelligence Platform. Benevity manages encryption keys. Google has no access to client data within the Benevity infrastructure; Web traffic and user analytics | EU; US (EU SCCs / UK Addendum; Google Cloud Data Processing Addendum) | |
| IGT I Outsourcing Lanka (Private) Limited (“IGT”) | Subcontractor services to supplement Benevity Technical Support and Software Development teams | Sri Lanka (EU SCCs / UK Addendum; IFS Website) | |
| Intercom | User Support | EU (Intercom Data Processing Addendum) | |
| Mailgun | System emails to Users | EU (Mailgun Data Processing Addendum) | |
| Mixpanel | User Analytics | EU (Mixpanel Data Processing Addendum) | |
| Modsquad, Inc | Subcontractor services to supplement Benevity Technical Support teams. | US (EU SCCs / UK Addendum; Modsquad Website) | |
| Ninja Partners, Ltd dba SupportNinja | Subcontractor services to supplement Benevity End User Care and Cause Support teams | US and Philippines (EU SCCs / UK Addendum; SupportNinja Website) | |
| Okta, Inc | Identity and authentication management for Benevity systems and applications. Benevity manages encryption keys. OKTA has no access to client data within the Benevity instance | US (EU SCCs / UK Addendum; OKTA Data Processing Addendum) | |
| Open AI, LLC AI | Generative artificial intelligence support for Benevity systems and processes. Benevity does not use client data to build or train models. | US (EU SCCs / UK Addendum; OpenAI Data Processing Addendum) | |
| PayPal, Inc | Credit card payment processing for donors. May receive name, address and email only. Benevity does not collect, store or process any sensitive cardholder data (PAN, Expiry, CVC). | US (EU SCCs / UK Addendum; PayPal Agreements Hub) | |
| Pendo.io, Inc | Product analytics and user feedback, targeted in-platform guidance, feature adoption nudges, client admin communication to platform admin email addresses. | EU (EU SCCs / UK Addendum; Pendo Data Processing Addendum) | |
| Ping Identity Corporation | Single Sign On provider for integration with clients identity provider (IPD). | US (EU SCCs / UK Addendum; Ping Identity Data Privacy Addendum) | |
| Pluto Security Inc | Inspects and analyzes internal AI platform interactions strictly in real-time o generate security monitoring summaries and support incident triage. | US (Pluto Website - Data Processing Agreement, Standard Contractual Clauses (SCCs)) | |
| RaiseNow | Payment processing | EU (RaiseNow Data Processing Agreement) | |
| Rocket Science Group LLC dba Mailchimp | Email template and delivery to users | US (EU SCCs / UK Addendum; Mailchimp Data Processing Addendum) | |
| Segment.io, Inc., by Twilio | User Analytics | EU (Twilio Data Protection Addendum) | |
| Stripe | Payment processing | US (Stripe Data Processing Agreement) | |
| strongDM, Inc | Access management and event logging for database infrastructure for Benevity teams. StrongDM has no access to client data. | US (EU SCCs / UK Addendum; StrongDM Data Processing Agreement) | |
| SumSub Inc | Remote identity verification, non-profit organization validation, customer due diligence, anti-money laundering screening. | EU; US (SumSub website - Data Processing Addendum, SCCs (UK and Switzerland supplements)) | |
| Surecall Contact Centers Ltd. | Subcontractor services to supplement Benevity End User Care teams | US and Canada (Adequacy decision for Canada; EU SCCs / UK Addendum.; Surecall Website) | |
| Zendesk, Inc | Client ticketing and user support platform | US (EU SCCs / UK Addendum; Zendesk Data Processing Agreement) |
Service status
90 days agotoday
- 2 incidents in 36 days
- 0 major or critical
- 3 h 41 min typical time to resolve
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Employees are unable to upload receipts for match requests | minor | 37 min | |
| Grants Essential (formerly Benevity Grants) tenants may be experiencing some service degradation related to emails | no impact stated | 3 h 41 min |
Incidents per month
critical major minor no impact stated before or partly before our history
Components affected
| Component | Incidents | Bar |
|---|---|---|
| Donate and Volunteer Core Services | 1 | |
| Grants Essential (formerly Benevity Grants) | 1 |
As Benevity's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Changes
None since tracking began.
Rating badge for Benevity's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/benevity"><img src="https://thirdpartyindex.com/badge/benevity.svg" alt="Benevity transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/benevity)