Data Privacy
Third-Party Subprocessors
To deliver our services, PaperWorking engages third-party service providers (“subprocessors”) that may access or process customer data on our behalf. Each subprocessor has been reviewed for security and privacy compliance in accordance with GDPR Article 28.
Last updated: June 29, 2026 · 11 subprocessors
Infrastructure & Platform
| Entity Name | Purpose | Data Region | Privacy Policy |
|---|---|---|---|
| Google Cloud Platform (Firebase) | Cloud hosting, authentication (Firebase Auth), document database (Firestore), file storage (Cloud Storage), and serverless functions. | United States (us-central1) | View Policy → |
| Google Places API | Address autocomplete and geocoding for property search during project creation and acquisition workflows. | United States | View Policy → |
Payments & Billing
| Entity Name | Purpose | Data Region | Privacy Policy |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, card validation, customer billing portals, and revenue ledger storage. | United States | View Policy → |
Communications & Signatures
| Entity Name | Purpose | Data Region | Privacy Policy |
|---|---|---|---|
| Resend, Inc. | Transactional email delivery including onboarding sequences, metric alert notifications, team invitations, and password reset emails. | United States | View Policy → |
| DocuSign, Inc. | Electronic signature workflows for Letters of Intent (LOI), purchase agreements, and closing documents. Document envelope creation and status tracking. | United States | View Policy → |
| Intercom, Inc. / Crisp IM SAS | In-app customer support chat widget, helpdesk messaging, and support ticket management. | United States / Europe | View Policy → |
Property Data Providers
| Entity Name | Purpose | Data Region | Privacy Policy |
|---|---|---|---|
| RentCast, Inc. | Property valuation estimates (AVM), rent estimates, comparable sales and rental data, and zip-level market statistics for investment analysis. | United States | View Policy → |
| Bridge Interactive (Constellation1) | MLS listing data feeds including active listings, agent information, open house schedules, and property detail records for acquisition research. | United States | View Policy → |
Observability & Monitoring
| Entity Name | Purpose | Data Region | Privacy Policy |
|---|---|---|---|
| PostHog, Inc. | Product analytics, feature flag management, A/B test rollouts, and anonymized usage telemetry for product improvement. | United States | View Policy → |
| Sentry (Functional Software, Inc.) | Application error capture, client-side crash diagnostics, API route performance monitoring, and release health tracking. | United States | View Policy → |
| Better Stack, Inc. | Infrastructure uptime monitoring, incident alerting, public status page feeds, and on-call escalation. | United States / Europe | View Policy → |
This list is maintained at src/lib/compliance/subprocessors.ts and updated whenever a vendor is added or removed. Changes are tracked in version control for audit purposes. If you have questions about our subprocessors, contact us at privacy@paperworking.co.