Last updated: August 20, 2026 · Referenced by the Data Processing Addendum
DonorGraph LLC engages the third parties below to help deliver the Services. We give account administrators at least 30 days' notice before adding a subprocessor that processes Customer Data. To be notified of changes, email [email protected].
| Subprocessor | Location | Purpose | Data involved |
|---|---|---|---|
| Cloudflare, Inc. | United States | CDN, DNS, WAF, and object storage | Customer Data in transit; files stored in object storage |
| InterServer, Inc. | United States (New Jersey) | Application and database hosting | All Customer Data at rest |
| Stripe, Inc. | United States | Subscription billing and donation processing | Billing contact and payment details; donor name, email and amount for donations processed through the Services |
| Resend (Plus Five Five, Inc.) | United States | Transactional email delivery | Recipient name and email address, and the content of the message sent |
| Google LLC (Gemini / Vertex AI) | United States | AI generation of donor briefs and identity-resolution assistance | Prospect information included in a brief-generation prompt |
| Brave Software, Inc. | United States | Web search for public evidence | Search queries containing a prospect's name and locality |
| Searlo | United States | Web search for public evidence | Search queries containing a prospect's name and locality |
| Realie.ai | United States | Property ownership and valuation lookup | Owner name and locality submitted as a query |
Brief-generation prompts may contain limited prospect information and are sent to our AI provider under a zero-retention, no-training agreement. Customer Data is not used to train third-party AI models.
The government and public sources DonorGraph ingests — IRS, FEC and state campaign-finance agencies, the SEC, county assessors and recorders, the Department of Labor, the USPTO, and similar — are data sources, not subprocessors. We do not send them Customer Data. They are described in the Privacy Policy.