# Spiffy Spiffy (spiffy.co): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/spiffy - Documents last verified: 2026-10-06 - Transparency rating: 76/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 17 tracked vendors directly, 165 within two hops, 440 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three - Cite as: Spiffy, Third Party Index, https://thirdpartyindex.com/vendors/spiffy (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Subprocessor list | https://spiffy.co/legal/sub-processors/ | 2026-10-06 | 2026-10-05 | | Data processing addendum | https://spiffy.co/legal/dpa/ | 2026-10-06 | 2026-10-05 | | Privacy policy | https://spiffy.co/legal/privacy/ | 2026-10-06 | 2026-10-05 | | Terms | https://spiffy.co/legal/terms/ | 2026-10-06 | 2026-10-05 | | Status page | https://status.spiffy.co/ | 2026-10-06 | 2026-10-05 | ## Subprocessors (18) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud infrastructure provider for Spiffy, where uploads are stored. The SpiffyJS library is delivered through the AWS content delivery network, whose edge servers cache static assets globally; stored data resides in US data centers. | US | 2026-10-05 | | [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | Large language model API powering in-app AI features such as analytics insights and generated text; processes the account data included in a given request, typically aggregated analytics and merchant-authored content. | US | 2026-10-05 | | [DigitalOcean, Inc.](https://thirdpartyindex.com/vendors/digitalocean.md) | Cloud infrastructure provider for Spiffy, where non-application related assets are hosted. | US | 2026-10-05 | | [Fireflies.ai](https://thirdpartyindex.com/vendors/fireflies-ai-2.md) | Records and transcribes scheduled calls with Spiffy (such as sales, demo, and support calls) and internal meetings. | US | 2026-10-05 | | [Fly.io](https://thirdpartyindex.com/vendors/fly-io.md) | Cloud infrastructure provider for Spiffy, where all applications are hosted. Almost all data stored, processed, and transmitted through Spiffy resides on Fly data centers. | US | 2026-10-05 | | [GoHighLevel](https://thirdpartyindex.com/vendors/highlevel.md) | Sending transactional, service update, and product-related emails to merchants only. | US | 2026-10-05 | | [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Google reCAPTCHA is used as a spam and fraud prevention tool. Google Maps is used for address detection and autocompletion. | US | 2026-10-05 | | [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Hosts Spiffy's business email (including the support and privacy mailboxes) and internal documents. | US | 2026-10-05 | | [Help Scout](https://thirdpartyindex.com/vendors/help-scout.md) | Support inbox and help desk for merchant support conversations; handles merchant contact details and the content of support requests. | US | 2026-10-05 | | [MailGun, Inc.](https://thirdpartyindex.com/vendors/mailgun.md) | Sending transactional emails to merchants and end customers. Mail servers are provided by Mailgun to deliver emails from the product. | US | 2026-10-05 | | [MaxMind](https://thirdpartyindex.com/vendors/maxmind.md) | IP geolocation used as a fraud prevention tool and to adapt/localize checkouts based on the visitor's general region. | US | 2026-10-05 | | [N8N](https://thirdpartyindex.com/vendors/n8n.md) | Workflow automation for Spiffy's internal business processes; merchant account and contact details may pass through automated workflows. | US | 2026-10-05 | | [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Large language model API powering in-app AI features such as analytics insights and generated text; processes the account data included in a given request, typically aggregated analytics and merchant-authored content. | US | 2026-10-05 | | [PostHog](https://thirdpartyindex.com/vendors/posthog.md) | Product analytics used to understand and improve how the Service is used, including hosted checkout sessions; captures usage events, device/browser information, and IP addresses. | US | 2026-10-05 | | [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Error monitoring tool that helps find, triage, and prioritize application errors in real time. | US | 2026-10-05 | | [Slack](https://thirdpartyindex.com/vendors/slack.md) | Community platform for team communication and collaboration; Spiffy customers may be invited to join the Spiffy community. | US | 2026-10-05 | | [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Card vault and payment gateway provider for Spiffy's account billing. Merchants can also integrate their own account for processing end customer transactions. | US | 2026-10-05 | | [Tinybird](https://thirdpartyindex.com/vendors/tinybird.md) | Real-time analytics data storage powering Spiffy's reporting and analytics features; stores order and checkout event data. | US | 2026-10-05 | Read from ([evidence](https://thirdpartyindex.com/evidence/44890)). CSV: https://thirdpartyindex.com/vendors/spiffy/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai ## Subprocessor of (0) No tracked vendor lists it. --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api