# Finsweet

Finsweet (finsweet.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/finsweet
- Documents last verified: 2026-10-07
- Transparency rating: 89/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 19 tracked vendors directly, 185 within two hops, 484 within three; 1 tracked vendors rely on it directly, 1 within two hops, 1 within three
- Cite as: Finsweet, Third Party Index, https://thirdpartyindex.com/vendors/finsweet (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.finsweet.com/ | 2026-10-07 | 2026-10-07 |
| Subprocessor list | https://trust.finsweet.com/subprocessors | 2026-10-07 | 2026-10-07 |
| Data processing addendum | https://finsweet.com/legal/data-processing-addendum | 2026-10-07 | 2026-10-07 |
| Privacy policy | https://finsweet.com/legal/privacy-policy | 2026-10-07 | 2026-10-07 |
| Terms | https://finsweet.com/legal/terms-of-service | 2026-10-07 | 2026-10-07 |
| Security page | https://finsweet.com/company/security | 2026-10-07 | 2026-10-07 |
| Status page | https://status.finsweet.com/ | 2026-10-07 | 2026-10-07 |

## Subprocessors (22)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Airtable](https://thirdpartyindex.com/vendors/airtable.md) | Data storage and processing; Database and data management platform. | US, EU | 2026-10-07 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | Authentication, user management, and single sign-on (SSO).; Identity & access management | US, EU | 2026-10-07 |
| [Better Stack Uptime](https://thirdpartyindex.com/vendors/better-stack.md) | Service uptime tracking, incident management, and status reporting.; Uptime & monitoring | US, EU | 2026-10-07 |
| [Checkr](https://thirdpartyindex.com/vendors/checkr.md) | Employee management; employee and contractor background checks. | US | 2026-10-07 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | DNS management, security, CDN, serverless functions, and traffic optimization.; Security & performance | Global | 2026-10-07 |
| [Discourse](https://thirdpartyindex.com/vendors/discourse.md) | Customer support; Forum for product support and discussions. | US, EU | 2026-10-07 |
| [Figma](https://thirdpartyindex.com/vendors/figma.md) | Collaborative UI/UX design and prototyping tool.; Product and design | US | 2026-10-07 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | Code hosting, collaboration, and CI/CD workflows.; Version control & DevOps | US, EU | 2026-10-07 |
| [Google Analytics](https://thirdpartyindex.com/vendors/google-cloud.md) | Data analytics; Website traffic insights and user behavior tracking. | US, EU | 2026-10-07 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud infrastructure, Firestore database, backups, and Google Auth.; Cloud provider | US, EU | 2026-10-07 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Business operations.; Identity provider | US, EU | 2026-10-07 |
| [Loom](https://thirdpartyindex.com/vendors/atlassian.md) | Collaboration; Quick video messaging for async team communication. | US | 2026-10-07 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Engineering; LLM assistants | US | 2026-10-07 |
| [PostHog](https://thirdpartyindex.com/vendors/posthog.md) | Data analytics | US | 2026-10-07 |
| [Rewardful](https://thirdpartyindex.com/vendors/rewardful.md) | Affiliate Marketing; Referral program tracking and management. | US | 2026-10-07 |
| [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md) | Email marketing; Transactional and marketing email delivery. | US, EU | 2026-10-07 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | Collaboration; Real-time team messaging and integrations. | US, EU | 2026-10-07 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Digital payment processing and subscription billing.; Finance and payments | US, EU | 2026-10-07 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Continuous monitoring for SOC2, GDPR, and security frameworks.; Security & compliance | US | 2026-10-07 |
| [Webflow](https://thirdpartyindex.com/vendors/webflow.md) | Visual website builder and hosting platform.; Website development | US | 2026-10-07 |
| [Xano](https://thirdpartyindex.com/vendors/xano.md) | Backend as a service; Scalable no-code backend with APIs for Wized apps. | US | 2026-10-07 |
| YouTube | Marketing & education; Video hosting for marketing, tutorials, and education. | Global | 2026-10-07 |

Read from ([evidence](https://thirdpartyindex.com/evidence/58467)). CSV: https://thirdpartyindex.com/vendors/finsweet/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/57669))
- Claimed: HIPAA ([evidence](https://thirdpartyindex.com/evidence/57669))

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Arcade](https://thirdpartyindex.com/vendors/arcade.md): Cookie consent management on Arcade's marketing website, including serving the consent banner, recording visitor consent choices, scanning the site to detect co…

## Service status

Incidents it reported on its own status page.

- Last 1 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- Status page last read: 2026-10-07
- No incidents reported since Oct 7, 2026

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api