Campfire
Campfire declares 17 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Sep 22, 2026. 1 tracked vendor, Laravel, names Campfire as a subprocessor.
Not loaded by any published homepage.
Subprocessors CSV of Campfire's subprocessors · Atom feed of Campfire's subprocessors DORA draft CSV of Campfire's subprocessors as declared by Campfire what's this? ·
17 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services | Primary cloud infrastructure provider. All Campfire production systems — application servers, databases, file storage, caching, and search — run in AWS (us-west-2). All customer data is encrypted in transit and at rest. | ||
| Anthropic AI | LLM provider powering Ember, Campfire's AI accounting assistant. Receives the prompts and context needed to answer a request; API data is not used to train Anthropic's models. | ||
| Cloudflare | DNS, content delivery, and web application firewall. Terminates and proxies HTTPS traffic to the Campfire application; does not store customer data at rest. | ||
| Finch | Payroll connectivity provider. When a customer connects their payroll system, payroll and employee compensation data flows through Finch's API to generate payroll journal entries in Campfire. | ||
| Fivetran | Managed data pipeline. Replicates production data into Snowflake. | ||
| GitHub | Source code hosting and CI/CD. Stores Campfire's application code; no customer data is processed. | ||
| Google Workspace | Business productivity and identity provider. Used for company email, SSO into internal systems, and email delivery for select workflows. | ||
| Langchain | LLM observability platform. Stores traces of Ember chat sessions (prompts, responses, and tool calls) for debugging and quality evaluation. | ||
| Mailgun | Transactional email delivery. Sends outbound email from the Campfire platform (notifications, invoices, reports) and receives inbound email for email-based workflows. | ||
| OpenAI AI | LLM and embeddings provider used for select Ember features and document understanding. API data is not used to train OpenAI's models. | ||
| Plaid | Bank connectivity provider. When a customer links a bank account, Plaid retrieves account balances and transactions used for bank feeds and reconciliation. Campfire never sees or stores bank credentials. | ||
| PostHog | Product analytics. Collects in-app usage events (pages viewed, features used) tied to user IDs to improve the product; no accounting data is sent. | ||
| Pylon | Customer support platform. Processes support conversations and contact information. | ||
| Sentry | Application error monitoring. Captures error reports and stack traces from the Campfire application, which may include request context and user identifiers. | ||
| Snowflake | data warehouse. Holds a replicated copy of production data for reporting, and high volume data aggregations | ||
| Sprig | In-app survey and user research tool. Collects voluntary survey responses linked to user IDs; no accounting data is sent. | ||
| TurboPuffer | Vector database supporting AI search and retrieval. Stores embeddings of documentation and customer content used to give Ember relevant context. |
Web TechnologiesCSV of Campfire's web technologies · Atom feed of Campfire's web technologies
Campfire's homepage made 166 requests to 28 domains, and 14 services controlled by another company.
14 third parties by category: Analytics 6Advertising 2Marketing automation 1CDN 1Other 4
9 tracked companies loaded by the homepage are not in Campfire's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (1)CSV of the companies listing Campfire · Atom feed of the companies listing Campfire
Laravel laravel.com ERP
Incidents reported by Campfire's subprocessorsCSV of incidents reported by vendors Campfire lists · Atom feed of incidents reported by vendors Campfire lists
118 reported incidents in the last 30 days, by 11 of the vendors Campfire lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Campfire was involved.
And 93 more. All of them: CSV · Who is around them.
ChangesCSV of Campfire's changes · Atom feed of Campfire's changes
See the list as we read it on any date: Time machine
None since tracking began.