# Paperform Paperform (paperform.co): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/paperform - Documents last verified: 2026-10-01 - Transparency rating: 66/100 (how much it publishes, not how secure it is) - Cite as: Paperform, Third Party Index, https://thirdpartyindex.com/vendors/paperform (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.paperform.app/ | 2026-10-01 | 2026-10-01 | | Subprocessor list | https://trust.paperform.app/subprocessors | 2026-10-01 | 2026-10-01 | | Privacy policy | https://paperform.co/privacy/ | 2026-10-01 | 2026-10-01 | | Terms | https://paperform.co/terms/ | 2026-10-01 | 2026-10-01 | ## Subprocessors (25) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Processing period: Jan 1, 2018 - present Data disclosed: User data: email, name, IP address(es), business information, account information Submission data: information captured during the form submission process | Hosting provider | 2026-10-01 | | Anrok | Processes billing and transaction data (e.g., customer name, billing address, transaction amounts) necessary for tax determination and filing. Google Cloud Platform infrastructure. Data processed from 20 August 2026 - present; Sales tax management | USA | 2026-10-01 | | [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) | AI Provider; AI Provider, processing period from December 2024 to present | USA | 2026-10-01 | | [Atlassian](https://thirdpartyindex.com/vendors/atlassian.md) | Processing period: Jan 1, 2018 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of Paperform | Bug reports and feature request management. | 2026-10-01 | | [Bunny.net](https://thirdpartyindex.com/vendors/bunny-net.md) | Processing period: October 31st, 2023 - present Data disclosed: No PII is collected via Bunny.net at this time | CDN and Font hosting | 2026-10-01 | | [Chargebee](https://thirdpartyindex.com/vendors/chargebee.md) | Processing period: Feb 2, 2023 - present Data disclosed: User data: email, name, IP address(es), business information, account information Payment information, address, billing history. | Subscription management, payment processing. | 2026-10-01 | | [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Processing period: October 31st, 2023 - present Data disclosed: No PII is processed via Cloudflare at this time. | Captcha service | 2026-10-01 | | [GitHub](https://thirdpartyindex.com/vendors/github.md) | Processing period: June 23, 2023 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of Paperform | Product development | 2026-10-01 | | [Google Analytics](https://thirdpartyindex.com/vendors/google-cloud.md) | Processing period: Jan 1, 2018 - present Data disclosed: Analytics: Information derived from interacting with paperform.co or services provided by Paperform Incidental data: Some personal information may be shared during the day-to-day operation of Paperform | Analytics, sales attribution, product improvements | 2026-10-01 | | [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | GCP is currently only used as an AI service provider. | Cloud provider | 2026-10-01 | | [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Processing period: Jan 1, 2018 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of Paperform | To manage daily operations and communicate with the team. | 2026-10-01 | | [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Data disclosed: - User data: email, name, IP address(es), business information, account information - Analytics: Information derived from interacting with paperform.co or services provided by Paperform - Incidental data: Some personal information may be shared during the day-to-day operation of Paperform - Billing history Processing period: Jan 1, 2018 - present | Support and account related email notifications | 2026-10-01 | | [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Processing period: Jan 1, 2018 - present Data disclosed: Submission data: information captured during the form submission process | — | 2026-10-01 | | [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | GCP is currently only used as an AI service provider. | Cloud provider | 2026-10-01 | | [Microsoft Clarity](https://thirdpartyindex.com/vendors/microsoft-clarity.md) | Data disclosed: User data: Anonymised behaviour on site | Session recording for usability purposes | 2026-10-01 | | [MongoDB Atlas](https://thirdpartyindex.com/vendors/mongodb.md) | Processing period: Jan 1, 2018 - present Data disclosed: User data: email, name, IP address(es), business information, account information Submission data: information captured during the form submission process | Database management - hosting on AWS | 2026-10-01 | | [New Relic](https://thirdpartyindex.com/vendors/new-relic.md) | Processing period: Jan 1, 2018 - present Data disclosed: Analytics: Information derived from interacting with paperform.co or services provided by Paperform Incidental data: Some personal information may be shared during the day-to-day operation of Paperform | Systems monitoring, application logs. | 2026-10-01 | | [Notion](https://thirdpartyindex.com/vendors/notion.md) | Processing period: Mar 3, 2019 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of Paperform | To manage daily operations and communicate with the team. | 2026-10-01 | | [OpenAI](https://thirdpartyindex.com/vendors/openai.md) | Engineering; Processing period: From August 3, 2024. | US | 2026-10-01 | | [PagerDuty](https://thirdpartyindex.com/vendors/pagerduty.md) | Processing period: Jan 1, 2018 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of Paperform | Systems monitoring, incident management. | 2026-10-01 | | [Postmark](https://thirdpartyindex.com/vendors/postmark.md) | Processing period: April 5, 2024 - present Data disclosed: Submission data: information captured during the form submission process | — | 2026-10-01 | | Sendinblue | Processing period: Jan 1, 2018 - present Data disclosed: Submission data: information captured during the form submission process | — | 2026-10-01 | | [Slack](https://thirdpartyindex.com/vendors/slack.md) | Processing period: Jan 1, 2018 - present Data disclosed: Incidental data: Some personal information may be shared during the day-to-day operation of Paperform | To manage daily operations and communicate with the team. | 2026-10-01 | | [Stripe AU](https://thirdpartyindex.com/vendors/stripe.md) | Processing period: Jan 1, 2018 - present Data disclosed: User data: email, name, IP address(es), business information, account information Payment information, address, billing history. | Subscription management, payment processing. | 2026-10-01 | | [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Processing period: May 18, 2022 - present Data disclosed: Incidental data: Vanta has access to monitor systems and compliance state of security standards. Some incidental user data may be shared during the day-to-day monitoring | Security Compliance Management and Automation. | 2026-10-01 | Read from ([evidence](https://thirdpartyindex.com/evidence/26217)). CSV: https://thirdpartyindex.com/vendors/paperform/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/26212)) - Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/26212)) ## Listed as a subprocessor by (0) No tracked vendor lists it. --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api