# Harriet

Harriet (hrharriet.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/harriet
- Documents last verified: 2026-09-30
- Transparency rating: 76/100 (how much it publishes, not how secure it is)
- Cite as: Harriet, Third Party Index, https://thirdpartyindex.com/vendors/harriet (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://harriethq.com/sub-processors/ | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://harriethq.com/dpa/ | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://harriethq.com/privacy-policy/ | 2026-09-30 | 2026-09-30 |
| Terms | https://harriethq.com/terms/ | 2026-09-30 | 2026-09-30 |
| Security page | https://harriethq.com/security/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (12)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud storage (S3), email (SES), and related infrastructure (excluding AI inference; see AI and automation); LLM API for chat and workflow features via AWS Bedrock, including EU-hosted Anthropic models where configured (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) | EU (Ireland) / United States; EU (Ireland) and other regions as configured | 2026-09-30 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) | LLM API for chat and workflow features (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) | United States | 2026-09-30 |
| [Attio](https://thirdpartyindex.com/vendors/attio.md) | CRM for sales enquiries | United Kingdom / EU / United States | 2026-09-30 |
| [Google (Cloud / Gemini)](https://thirdpartyindex.com/vendors/google-cloud.md) | LLM API and related cloud services (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms); Optional Google Chat integration and notifications; Website analytics and advertising tags | United States; United States / EU | 2026-09-30 |
| [Mailgun (Sinch)](https://thirdpartyindex.com/vendors/mailgun.md) | Transactional email delivery | EU | 2026-09-30 |
| [Microsoft](https://thirdpartyindex.com/vendors/microsoft.md) | Optional Teams integration, authentication, and mailbox features | United States / EU | 2026-09-30 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) | LLM API for chat and workflow features (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms) | United States | 2026-09-30 |
| [PostHog](https://thirdpartyindex.com/vendors/posthog.md) | Product analytics (consent-gated on website) | EU / United States | 2026-09-30 |
| [Salesforce (Heroku)](https://thirdpartyindex.com/vendors/salesforce.md) | Application hosting and infrastructure | United States / EU regions | 2026-09-30 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Error monitoring and application performance | United States / EU | 2026-09-30 |
| [Slack Technologies](https://thirdpartyindex.com/vendors/slack.md) | Optional customer integration and notifications | United States | 2026-09-30 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payment processing and billing | United States / EU | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/22332)). CSV: https://thirdpartyindex.com/vendors/harriet/subprocessors.csv

## Listed as a subprocessor by (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api