Paperform Sub-processor List

Here is an up to date list of the third party vendors Paperform depend on to provide their service to customers.

Customer Success

Intercom (Intercom, Inc.)

Privacy Policy

Purpose: Support and account related email notifications.

Processing period: Jan 1, 2018 - present

Data disclosed:

• User data: email, name, IP address(es), business information, account information
• Analytics: Information derived from interacting with paperform.co or services provided by Paperform
• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
• Billing history

Atlassian (Atlassian Pty Ltd and Atlassian, Inc.)

Privacy Policy

Purpose: Bug reports and feature request management.

Processing period: Jan 1, 2018 - present

Data disclosed:

• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

Email Service Providers

Mailgun (Mailgun Technologies, Inc.)

Privacy Policy

Purpose: Transactional emails sent from no-reply@paperform.co, including emails sent on form submission.

Processing period: Jan 1, 2018 - present

Data disclosed:

• Submission data: information captured during the form submission process

SendInBlue (Sendinblue, Inc. dba Sendinblue)

Privacy Policy

Purpose: Fallback provider for transactional emails sent from no-reply@paperform.co, including emails sent on form submission.

Processing period: Jan 1, 2018 - present

Data disclosed:

• Submission data: information captured during the form submission process

Postmark (AC PM, LLC)

Privacy Policy

Purpose: Fallback provider for transactional emails sent from no-reply@paperform.co, including emails sent on form submission.

Processing period: April 5, 2024 - present

Data disclosed:

• Submission data: information captured during the form submission process

Marketing/Analytics

Google Analytics (Google Analytics)

Privacy Policy

Purpose: Analytics, sales attribution, product improvements

Processing period: Jan 1, 2018 - present

Data disclosed:

• Analytics: Information derived from interacting with paperform.co or services provided by Paperform
• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

VWO (Wingify)

Privacy Policy

Purpose: Analytics, sales attribution, product improvements

Processing period: August 29, 2023 - present

Data disclosed:

• Analytics: Information derived from interacting with paperform.co or services provided by Paperform
• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

Hubspot (Hubspot)

Privacy Policy

Purpose: Relationship and partnership management

Processing period: Jan 1, 2018 - present

Data disclosed:

• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

Copper CRM (Copper CRM)

Privacy Policy

Purpose: Relationship and partnership management

Processing period: Mar 1, 2020 - present

Data disclosed:

• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

MailChimp (Rocket Science Group LLC dba MailChimp)

Privacy Policy

Purpose: Newsletter and mailing list management

Processing period: Jan 1, 2018 - present

Data disclosed:

• User data: email, name, IP address(es), business information, account information

Microsoft Clarity (Microsoft Corporation)

Privacy Policy

Purpose: Session recording for usability purposes

Processing period: Jan 1, 2023

Data disclosed:

• User data: Anonymised behaviour on site

Dovetail (Dovetail Research Pty. Ltd.)

Privacy Policy

Purpose: Product research and customer interviews

Processing period: July 4, 2023

Data disclosed:

• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

Operational services

AWS (Amazon Web Services)

Privacy Policy

Purpose: Hosting provider

Processing period: Jan 1, 2018 - present

Data disclosed:

• User data: email, name, IP address(es), business information, account information
• Submission data: information captured during the form submission process

MongoDB Atlas (MongoDB, Inc.)

Privacy Policy

Purpose: Database managment - hosting on AWS

Processing period: Jan 1, 2018 - present

Data disclosed:

• User data: email, name, IP address(es), business information, account information
• Submission data: information captured during the form submission process

New Relic (New Relic, Inc.)

Privacy Policy

Purpose: Systems monitoring, application logs.

Processing period: Jan 1, 2018 - present

Data disclosed:

• Analytics: Information derived from interacting with paperform.co or services provided by Paperform
• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

Github (Microsoft)

Privacy Policy

Purpose: Product development

Processing period: June 23, 2023 - present

Data disclosed:

• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

PagerDuty (PagerDuty, Inc.)

Privacy Policy

Purpose: Systems monitoring, incident management.

Processing period: Jan 1, 2018 - present

Data disclosed:

• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

Vanta (Vanta Inc.)

Privacy Policy

Purpose: Security Compliance Management and Automation.

Processing period: May 18, 2022 - present

Data disclosed:

• Incidental data: Vanta has access to monitor systems and compliance state of security standards. Some incidental user data may be shared during the day-to-day monitoring.

Bunny.net

Privacy Policy

Purpose: CDN and Font hosting

Processing period: October 31st, 2023 - present

Data disclosed:

• No PII is collected via Bunny.net at this time.

Cloudflare (https://cloudflare.com)

Privacy & Data Protection

Purpose: Captcha service

Processing period: October 31st, 2023 - present

Data disclosed:

• No PII is processed via Cloudflare at this time.

Productivity Tools

Google Workspace (Google Workspace)

Privacy Policy

Purpose: To manage daily operations and communicate with the team.

Processing period: Jan 1, 2018 - present

Data disclosed:

• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

Notion (Notion Labs, Inc.)

Privacy Policy

Purpose: To manage daily operations and communicate with the team.

Processing period: Mar 3, 2019 - present

Data disclosed:

• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

Slack (Slack Technologies, Inc.)

Privacy Policy

Purpose: To manage daily operations and communicate with the team.

Processing period: Jan 1, 2018 - present

Data disclosed:

• Incidental data: Some personal information may be shared during the day-to-day operation of Paperform

Subscription Management

Stripe (Stripe, Inc.)

Privacy Policy

Purpose: Subscription management, payment processing.

Processing period: Jan 1, 2018 - present

Data disclosed:

• User data: email, name, IP address(es), business information, account information
• Payment information, address, billing history.

Chargebee (Chargebee Inc.)

Privacy Policy

Purpose: Subscription management, payment processing.

Processing period: Feb 2, 2023 - present

Data disclosed:

• User data: email, name, IP address(es), business information, account information
• Payment information, address, billing history.

Avalara (Impendulo Limited Services)

Purpose: Tax calculation and compliance

Processing Period: April 23, 2024 - present

Data disclosed:

• User data: email, name, IP address(es), business information, account information
• Payment information, address, billing history.