Subprocessors
Last updated: June 1, 2026
DonorSpark uses the following subprocessors to provide the Service. We update this list before adding or replacing a subprocessor. “Donor Data” means donor/supporter personal data processed on behalf of our nonprofit customers; “No Donor Data” means the provider receives only DonorSpark customer/account or operational data, not donor personal data. This page also forms part of our Privacy Policy and Data Processing Addendum.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting & Blob storage (deck HTML containing donor name + gift amount) | Donor Data + customer data | USA |
| Neon Inc. | Managed Postgres database (primary data store for all structured records) | Donor Data + customer data | USA |
| Anthropic PBC | AI generation of deck copy (Claude API). Donor name may appear in prompts when a customer supplies a personalized note. Not used for model training. | Donor Data (limited) | USA |
| Clerk Inc. | Customer authentication & session management | Customer account data — No Donor Data | USA |
| Stripe Inc. | Subscription billing & payments (card data held by Stripe, not DonorSpark) | Customer billing data — No Donor Data | USA |
| PostHog Inc. | Product analytics (usage/pageview events). No donor PII sent. | Usage/device data — No Donor Data | USA |
| Functional Software, Inc. (Sentry) | Error & performance monitoring. Donor/contact PII scrubbed before transmission. | Diagnostic data (PII-scrubbed) — No Donor Data | USA |
| Resend (Plus Five Five, Inc.) | Transactional email to customers (verification, billing, account notices) | Customer email — No Donor Data | USA |
| Loops, Inc. | Lifecycle/marketing email to customers | Customer email — No Donor Data | USA |
| Upstash, Inc. | Rate limiting / caching | Operational data (e.g., IP for rate limits) — No Donor Data | USA |
Questions about our subprocessors or to request our Data Processing Addendum, contact privacy@donorspark.app.