Legal

Subprocessors

Last updated: 2026-09-27

  • Supabase
    Purpose Database and storage
    Data Product and customer data
    Location United States
  • Vercel
    Purpose Application hosting
    Data Product traffic and data in transit
    Location United States
  • Cloudflare
    Purpose DNS, CDN, network security
    Data Traffic metadata
    Location Global edge network
  • Amazon Web Services
    Purpose Cloud storage
    Data Uploaded documents, files, and photos (vault storage)
    Location United States
  • Clerk
    Purpose Authentication
    Data Account and identity data
    Location United States
  • Anthropic
    Purpose AI model provider
    Data Prompts and service data for AI outputs; no training on customer data
    Location United States
  • OpenAI
    Purpose AI model provider
    Data Prompts and service data for AI outputs; no training on customer data
    Location United States
  • Google
    Purpose AI model provider (Gemini)
    Data Prompts and service data for AI outputs; no training on customer data
    Location United States
  • xAI
    Purpose AI model provider (Grok)
    Data Prompts and service data for AI outputs; no training on customer data
    Location United States
  • Plaid (directly authorized service)
    More information
    Purpose Financial account connections (user-authorized)
    Data Read-only account and financial data
    Location United States
  • MX (directly authorized service)
    More information
    Purpose Financial account connections (user-authorized)
    Data Read-only account and financial data
    Location United States
  • Finicity (a Mastercard company) (directly authorized service)
    More information
    Purpose Financial account connections (user-authorized)
    Data Read-only account and financial data
    Location United States
  • Yodlee (directly authorized service)
    More information
    Purpose Financial account connections (user-authorized)
    Data Read-only account and financial data
    Location United States
  • Finch (directly authorized service)
    More information
    Purpose Employer HRIS and payroll integration (employer-authorized)
    Data Employer-provided employment and benefits data
    Location United States
  • Carta (directly authorized service)
    More information
    Purpose Equity data integration (employer-authorized; user-authorized when employee-side connections ship)
    Data Equity records
    Location United States
  • Stripe
    Purpose Payments and billing
    Data Employer billing and payment data
    Location United States
  • PostHog
    Purpose Product analytics
    Data Usage and behavioral data, identifiers
    Location United States
  • Sentry
    Purpose Error monitoring
    Data Error and diagnostic data
    Location United States
  • Notion
    Purpose Form submission storage and workflows
    Data Contact details and form submission content
    Location United States
  • Postmark
    Purpose Transactional email
    Data Email address, message content
    Location United States
  • Resend
    Purpose Transactional email
    Data Email address, message content
    Location United States
  • Loops
    Purpose Marketing and lifecycle email
    Data Email address, marketing preferences
    Location United States

Services you or your employer authorize directly to provide data to Journey. These providers maintain their own privacy notices, terms, and consent experiences.