Third Party Index

Paperform

paperform.co

Subprocessors

25 third parties. CSVof Paperform's subprocessors · Atom

NamePurposeLocationListed since
Amazon Web Services Processing period: Jan 1, 2018 - present Data disclosed: User data: email, name, IP address(es), business information, account information Submission data: information captured during the form submission processHosting provider
Anrok Processes billing and transaction data (e.g., customer name, billing address, transaction amounts) necessary for tax determination and filing. Google Cloud Platform infrastructure. Data processed from 20 August 2026 - present; Sales tax managementUSA
Anthropic AIAI Provider; AI Provider, processing period from December 2024 to presentUSA
Atlassian Processing period: Jan 1, 2018 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of PaperformBug reports and feature request management.
Bunny.net Processing period: October 31st, 2023 - present Data disclosed: No PII is collected via Bunny.net at this timeCDN and Font hosting
Chargebee Processing period: Feb 2, 2023 - present Data disclosed: User data: email, name, IP address(es), business information, account information Payment information, address, billing history.Subscription management, payment processing.
Cloudflare Processing period: October 31st, 2023 - present Data disclosed: No PII is processed via Cloudflare at this time.Captcha service
GitHub Processing period: June 23, 2023 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of PaperformProduct development
Google Analytics Processing period: Jan 1, 2018 - present Data disclosed: Analytics: Information derived from interacting with paperform.co or services provided by Paperform Incidental data: Some personal information may be shared during the day-to-day operation of PaperformAnalytics, sales attribution, product improvements
Google Cloud GCP is currently only used as an AI service provider.Cloud provider
Google Workspace Processing period: Jan 1, 2018 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of PaperformTo manage daily operations and communicate with the team.
Intercom Data disclosed: - User data: email, name, IP address(es), business information, account information - Analytics: Information derived from interacting with paperform.co or services provided by Paperform - Incidental data: Some personal information may be shared during the day-to-day operation of Paperform - Billing history Processing period: Jan 1, 2018 - presentSupport and account related email notifications
Mailgun Processing period: Jan 1, 2018 - present Data disclosed: Submission data: information captured during the form submission process
Microsoft Azure GCP is currently only used as an AI service provider.Cloud provider
Microsoft Clarity Data disclosed: User data: Anonymised behaviour on siteSession recording for usability purposes
MongoDB Atlas Processing period: Jan 1, 2018 - present Data disclosed: User data: email, name, IP address(es), business information, account information Submission data: information captured during the form submission processDatabase management - hosting on AWS
New Relic Processing period: Jan 1, 2018 - present Data disclosed: Analytics: Information derived from interacting with paperform.co or services provided by Paperform Incidental data: Some personal information may be shared during the day-to-day operation of PaperformSystems monitoring, application logs.
Notion Processing period: Mar 3, 2019 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of PaperformTo manage daily operations and communicate with the team.
OpenAI AIEngineering; Processing period: From August 3, 2024.US
PagerDuty Processing period: Jan 1, 2018 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of PaperformSystems monitoring, incident management.
Postmark Processing period: April 5, 2024 - present Data disclosed: Submission data: information captured during the form submission process
Sendinblue Processing period: Jan 1, 2018 - present Data disclosed: Submission data: information captured during the form submission process
Slack Processing period: Jan 1, 2018 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of PaperformTo manage daily operations and communicate with the team.
Stripe AU Processing period: Jan 1, 2018 - present Data disclosed: User data: email, name, IP address(es), business information, account information Payment information, address, billing history.Subscription management, payment processing.
Vanta Processing period: May 18, 2022 - present Data disclosed: Incidental data: Vanta has access to monitor systems and compliance state of security standards. Some incidental user data may be shared during the day-to-day monitoringSecurity Compliance Management and Automation.

Compliance

Certified
Says it complies with

Certifications as Paperform's trust center lists them; reports are usually shared on request (evidence)

Changes

None since tracking began.

Rating badge for Paperform's site

Paperform transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/paperform"><img src="https://thirdpartyindex.com/badge/paperform.svg" alt="Paperform transparency rating on Third Party Index" height="20"></a>
[![Paperform transparency rating on Third Party Index](https://thirdpartyindex.com/badge/paperform.svg)](https://thirdpartyindex.com/vendors/paperform)