Paperform Sub-processor List
Security & Compliance
Can I capture sensitive and/or private information on forms?Data Subject ComplaintsHow do I make a claim of copyright infringement against a form? How do I make a data or GDPR request?Is Paperform HIPAA-compliant?What security measures does Paperform have in place?Where can I learn more about GDPR and Paperform?Paperform Sub-processor ListUpdate for Apache Log4j vulnerability (CVE-2021-44228)What are Paperform's Terms and Conditions, and Privacy Policy?Where can I report people using your services for abusive and malicious behaviour?Here is an up to date list of the third party vendors Paperform depend on to provide their service to customers.
Customer Success
Intercom (Intercom, Inc.)
Purpose: Support and account related email notifications.
Processing period: Jan 1, 2018 - present
Data disclosed:
- User data: email, name, IP address(es), business information, account information
- Analytics: Information derived from interacting with paperform.co or services provided by Paperform
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
- Billing history
Atlassian (Atlassian Pty Ltd and Atlassian, Inc.)
Purpose: Bug reports and feature request management.
Processing period: Jan 1, 2018 - present
Data disclosed:
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
Email Service Providers
Mailgun (Mailgun Technologies, Inc.)
Purpose: Transactional emails sent from no-reply@paperform.co, including emails sent on form submission.
Processing period: Jan 1, 2018 - present
Data disclosed:
- Submission data: information captured during the form submission process
SendInBlue (Sendinblue, Inc. dba Sendinblue)
Purpose: Transactional emails sent from no-reply@paperform.co, including emails sent on form submission.
Processing period: Jan 1, 2018 - present
Data disclosed:
- Submission data: information captured during the form submission process
Marketing/Analytics
Google Analytics (Google Analytics)
Purpose: Analytics, sales attribution, product improvements
Processing period: Jan 1, 2018 - present
Data disclosed:
- Analytics: Information derived from interacting with paperform.co or services provided by Paperform
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
Hubspot (Hubspot)
Purpose: Relationship and partnership management
Processing period: Jan 1, 2018 - present
Data disclosed:
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
Copper CRM (Copper CRM)
Purpose: Relationship and partnership management
Processing period: Mar 1, 2020 - present
Data disclosed:
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
MailChimp (Rocket Science Group LLC dba MailChimp)
Purpose: Newsletter and mailing list management
Processing period: Jan 1, 2018 - present
Data disclosed:
- User data: email, name, IP address(es), business information, account information
Microsoft Clarity (Microsoft Corporation)
Purpose: Session recording for usability purposes
Processing period: Jan1, 2023
Data disclosed:
- User data: Anonymised behaviour on site
Operational services
AWS (Amazon Web Services)
Purpose: Hosting provider
Processing period: Jan 1, 2018 - present
Data disclosed:
- User data: email, name, IP address(es), business information, account information
- Submission data: information captured during the form submission process
MongoDB Atlas (MongoDB, Inc.)
Purpose: Database managment - hosting on AWS
Processing period: Jan 1, 2018 - present
Data disclosed:
- User data: email, name, IP address(es), business information, account information
- Submission data: information captured during the form submission process
New Relic (New Relic, Inc.)
Purpose: Systems monitoring, application logs.
Processing period: Jan 1, 2018 - present
Data disclosed:
- Analytics: Information derived from interacting with paperform.co or services provided by Paperform
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
Github (Microsoft)
Purpose: Product development
Processing period: June 23, 2023 - present
Data disclosed:
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
PagerDuty (PagerDuty, Inc.)
Purpose: Systems monitoring, incident management.
Processing period: Jan 1, 2018 - present
Data disclosed:
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
Vanta (Vanta Inc.)
Purpose: Security Compliance Management and Automation.
Processing period: May 18, 2022 - present
Data disclosed:
- Incidental data: Vanta has access to monitor systems and compliance state of security standards. Some incidental user data may be shared during the day-to-day monitoring.
Productivity Tools
Google Workspace (Google Workspace)
Purpose: To manage daily operations and communicate with the team.
Processing period: Jan 1, 2018 - present
Data disclosed:
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
Notion (Notion Labs, Inc.)
Purpose: To manage daily operations and communicate with the team.
Processing period: Mar 3, 2019 - present
Data disclosed:
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
Slack (Slack Technologies, Inc.)
Purpose: To manage daily operations and communicate with the team.
Processing period: Jan 1, 2018 - present
Data disclosed:
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform
Subscription Management
Stripe (Stripe, Inc.)
Purpose: Subscription management, payment processing.
Processing period: Jan 1, 2018 - present
Data disclosed:
- User data: email, name, IP address(es), business information, account information
- Payment information, address, billing history.
Chargebee (Chargebee Inc.)
Purpose: Subscription management, payment processing.
Processing period: Feb 2, 2023 - present
Data disclosed:
- User data: email, name, IP address(es), business information, account information
- Payment information, address, billing history.
ProfitWell (200OK LLC dba Profitwell)
Purpose: Subscription metrics
Processing period: Jan 1, 2018 - present
Data disclosed:
- User data: email, name, IP address(es), business information, account information
- Analytics: Information derived from interacting with paperform.co or services provided by Paperform
ChartMogul (ChartMogul CMTDE GmbH & Co. KG)
Purpose: Subscription metrics
Processing period: June 6, 2022 - present
Data disclosed:
- User data: email, name, IP address(es), business information, account information
First Promoter (Igil Webs SRL (“First Promoter”))
Purpose: Affiliate program management
Processing period: Aug 1, 2019 - present
Data disclosed:
- Incidental data: Some personal information may be shared during the day-to-day operation of Paperform