Expensify
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 72 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Expensify's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/expensify"><img src="https://thirdpartyindex.com/badge/expensify.svg" alt="Expensify transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/expensify)Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list vanta | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Airship | Customer Notification Delivery; Notification data and Account Identifiers | US | |
| Amazon Web Services | Cloud Infrastructure Provider; Member Data and Personal Data | US | |
| Ashby | Candidate Data; Recruiting | US | |
| The Bancorp Bank, N.A. | Payment Processor; Personal Data and Financial Data | US | |
| Calendly | Emails; Meeting Scheduling | US | |
| Checkbook | Member Data and Financial Data; Payment Processor | US | |
| Clearbit | Account Configuration; Emails | US | |
| CloudFactory | Receipt Images; Receipt Scanning | Nepal | |
| Cloudflare | Cloud Security and Infrastructure; Member Data and Personal Data | US; Globally for CDN | |
| Cloudtask | Member Data; Sales and Support | US | |
| Collective Solutions | Receipt Images; Receipt Scanning | Honduras | |
| DocuSign | Document Management; Member Data and Personal Data | US | |
| Evocative | Data Center Provider; Member Data and Personal Data | US | |
| FullStory | Member Data and Personal Data | Product and design | |
| GitHub | Member Data and Personal Data; Version Control | US | |
| Gong | Member Data and Personal Data | Sales | |
| Google Drive | Document management; Member Data and Personal Data | US | |
| Google Workspace | Identity provider; Member Data and Personal Data | US | |
| HubSpot | CRM; Member Data and Personal Data | US | |
| Ketch Privacy Orchestrator | Member Data; Privacy rights management | US | |
| Mailgun | Email sending; Member Data and Personal Data | US | |
| OpenAI | LLM model provider; Member Data and Personal Data | US | |
| Plaid | Member Data and Personal Data; Transaction import | US;EU;UK | |
| Sentry | Application monitoring; Member Data and Personal Data | US | |
| Slack | Internal chat system; Member Data and Personal Data | US | |
| Stripe | Credit card billing; Member Data and Personal Data | US | |
| Switch | Data Center Provider; Member Data and Personal Data | US | |
| Twilio | Member Data and Personal Data; Text message provider | US | |
| Typeform | Customer questionnaires; Member Data and Personal Data | US | |
| Vanta | Continuous security and compliance monitoring; Security | US | |
| Zapier | Internal automation system; Member Data and Personal Data | US | |
| Zoom | Member Data and Personal Data; Video conferencing | US |
Changes
None since tracking began.