Third Party Index

Fountain

fountain.com

Certifications and attestations: SOC 1 Type IISOC 2 Type IIISO/IEC 27001ISO/IEC 42001

Says it complies with: GDPR, CCPA/CPRA

Certifications as listed on Fountain's trust center (evidence) ; reports themselves are usually shared on request.

Transparency

Exemplary

Breakdown
Subprocessor list30 / 30
Processing locations8 / 8
Purposes7 / 7
Data processing addendum12 / 12
Trust center8 / 8
Privacy policy6 / 6
security.txt6 / 6
Security page5 / 5
Status page5 / 5
Vulnerability disclosurenot found0 / 5
Pages still reachable8 / 8
Total95 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

Fountain transparency rating

For Fountain's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/fountain"><img src="https://thirdpartyindex.com/badge/fountain.svg" alt="Fountain transparency rating on Third Party Index" height="20"></a>
[![Fountain transparency rating on Third Party Index](https://thirdpartyindex.com/badge/fountain.svg)](https://thirdpartyindex.com/vendors/fountain)

Documents

DocumentVerifiedChangedEvidence
Trust center vanta snapshot
Subprocessor list snapshot
Data processing addendum snapshot
Privacy policy snapshot
Terms snapshot
Security page snapshot
security.txt snapshot
Status page statuspage snapshot

Subprocessors

40 third parties. CSV · Atom

NamePurposeLocationListed since
AlphaRun AI powered candidate interviewing platformSan Francisco, CA (DPA w/ SCCs)
Amazon Web Services, Inc (AWS) Cloud hosting and infrastructure servicesData Center: United States; Ireland; Germany; France; India; Office Location(s): United States (DPA w/ SCCs)
Anthropic Custom GPT powering chatbot and other AI based servciesSan Francisco, CA (DPA w/ SCCs)
Appcast Job Board AggregatorUnited States (Binding Corporate Rules)
Atlassian, Inc. Bug tracking, manage Service improvements, resolve customer support ticketsSan Francisco, CA; Sydney, Australia (DPA w/ SCCs)
Base64.ai Automated Document Parsing and ReviewNew York, NY (DPA w/ SCCs)
Cloudflare, Inc. Infrastructure services, content delivery network services, security services.Data Center: United States; Office Location(s): United States (DPA w/ SCCs)
Cronofy Limited Calendar synchronization platformNottingham, UK; Netherlands (DPA w/ SCCs)
Customer.io Marketing and messaging automationUnited States (DPA w/ SCCs)
Danzig Media, LLC (Cameratag) Video and image capture, editing and viewingNew York, NY (DPA w/ SCCs)
Datadog, Inc. System and event logs and operational monitoring with session replaysData Center: United States; Office Location(s): United States (DPA w/ SCCs)
DocuSign, Inc. Electronic signature capture, delivery and audit serviceSan Francisco, CA (Binding Corporate Rules)
Dropbox Sign Electronic signature capture, delivery and audit serviceSan Francisco, CA (DPA w/ SCCs)
Elasticsearch B.V. Search functionalityNetherlands; Mountain View, CA (DPA w/ SCCs)
Fivetran Inc. Data centralization, replication and integration (ETL solution)Data Center: United States; Office Location(s): United States (DPA w/ SCCs)
Fullstory, Inc. User experience and session monitoring and analyticsAtlanta, GA (DPA w/ SCCs)
Gong.io Ltd. Customer support video capture and viewingSan Francisco, CA; Israel (DPA w/ SCCs)
Google, Inc. (BigQuery) Data warehousing and analyticsData Center: United States; Office Location(s): United States (DPA w/ SCCs)
Google Maps Address ValidationUnited States (DPA w/ SCCs)
Linear Bug tracking, manage Service improvements, resolve customer support ticketsSan Francisco, CA (DPA w/ SCCs)
Looker Data Sciences, Inc. Reporting and analytics servicesSanta Cruz, CA (DPA w/ SCCs)
MessageBird B.V Initiate, receive and manage messaging and callsAmsterdam, the Netherlands (DPA w/ SCCs)
MessageBird UK Limited Socket communication layer; real-time updatesUnited States; UK; Netherlands (DPA w/ SCCs)
MongoDB Application DatabaseData Center: United States; Office Location(s): United States (DPA w/ SCCs)
Okta, Inc. Identity and access managementSan Francisco, CA (DPA w/ SCCs)
OpenAI Custom GPT powering chatbot and other AI based servciesSan Francisco, CA (DPA w/ SCCs)
PandaDoc, Inc. Document management and electronic signaturesSan Francisco, CA; Lisbon, Portugal (DPA w/ SCCs)
Posthog Product analytics and feature flagsSan Francisco, CA (DPA w/ SCCs)
Prismatic Software Inc. Integration PlatformSioux Falls, South Dakota (Binding Corporate Rules)
Recruitics Job Board AggregatorUnited States (Binding Corporate Rules)
Salesforce, Inc. Customer relationship management platformSan Francisco, CA (Binding Corporate Rules)
SendGrid, Inc. (Twilio Inc.) Initiate, route, send and track email messagingSan Francisco, CA; Dublin, Ireland; London, UK (Binding Corporate Rules)
Sovren Automated Document Parsing and ReviewThe Netherlands (DPA w/ SCCs)
Twilio Inc. Initiate, receive and manage messaging and callsSan Francisco, CA; Dublin, Ireland; London, UK (Binding Corporate Rules)
Vonage Holdings Corp. Text messaging automation and video streamingUnited States (DPA w/ SCCs)
Vonq Job Board AggregatorUnited States (Binding Corporate Rules)
WhatsApp LLC and WhatsApp Ireland Limited Initiate, receive and manage messaging and callsMenlo Park, CA; Dublin, Ireland (DPA w/ SCCs)
Workato Integration PlatformUnited States (DPA w/ SCCs)
Workbright Form I-9 and W-4 automationSan Francisco, CA (DPA w/ SCCs)
Zendesk, Inc. Receive, manage and resolve customer support ticketsSan Francisco, CA (DPA w/ SCCs)

Service status

9 incidents in the last 83 days (3 major or critical, 3 minor, 3 with no stated impact) · typically resolved in 1 h 10 min · longest major: 3 h 10 min

BeganIncidentImpactLasted
i9 Centre – Ongoing Service Issueminor34 min evidence
Partial Service Degradationmajor3 h 10 min evidence
Source dashboard outagemajor26 min evidence
i9 Centre – Ongoing Service Issuenone21 min evidence
Partial Service Degradationminor1 h 23 min evidence
Requesting Worker Portal Link by Email Failsnone33 min evidence
Login issues on Hire UImajor1 h 10 min evidence
Stale data in Analytics and Warehouse for EU Customersminor23 h 51 min evidence

As Fountain's status page reports its own incidents (scheduled maintenance left out), read every few hours since .

Changes

None since tracking began.