Last updated: June 1, 2026.
Timecounts engages a limited number of third-party service providers ("subprocessors") to support the delivery of our Services.
Before working with a subprocessor, we review their privacy, security, and confidentiality practices. Each subprocessor processes only the personal data required to perform its specific function.
What is a subprocessor?
A subprocessor is a third party engaged by Timecounts to process personal data on our behalf.
Subprocessors help us operate the platform and provide services such as cloud hosting, email delivery, customer support, payments, document storage, and security monitoring.
Infrastructure subprocessors
These providers help host, secure, and operate the Timecounts platform.
Subprocessor | Purpose |
Amazon Web Services (AWS) | Cloud infrastructure and hosting |
Heroku (Salesforce) | Application hosting and deployment |
Cloudflare | CDN, DNS management, DDoS protection, and SSL termination |
Google Analytics | Website analytics and usage insights |
Service subprocessors
These providers support specific functionality within Timecounts or assist our team in operating, supporting, securing, and improving the service.
Subprocessor | Purpose |
Anthropic | AI-powered features, content generation, and customer support assistance |
Checkr | Volunteer background checks |
Double the Donation | Volunteer and donation matching services |
Google Workspace | Internal communication, email, meetings, and document storage |
Intercom | Customer support, help center, onboarding, and product communications |
Linear | Product development, issue tracking, and customer support workflows |
Mandrill / Mailchimp (Intuit) | Transactional and notification emails |
OpenAI | AI-powered features, content generation, and customer support assistance |
Sentry | Error monitoring and diagnostics |
Slack | Internal team communication and operational support |
Stripe | Payment processing |
Twilio | SMS messaging |
Uploadcare | File and document upload storage |
Xero | Accounting and invoice management |
Subprocessor notifications
In accordance with our Data Processing Agreement (DPA), Timecounts will provide at least 30 days' notice before adding or replacing a subprocessor.
Any changes to our subprocessor list will be published on this page.
Data Processing Agreements
Timecounts works only with subprocessors that provide appropriate privacy, security, and data protection commitments through their service agreements or Data Processing Agreements.
These agreements help ensure personal data is protected from unauthorized access, disclosure, alteration, loss, or destruction.
International data transfers
Timecounts maintains appropriate safeguards for international data transfers where required.
Depending on the provider and jurisdiction, these safeguards may include:
Standard Contractual Clauses (SCCs)
Adequacy decisions
Data privacy frameworks
Other lawful transfer mechanisms
Related resources
Data Processing Agreement (DPA)
https://timecounts.org/dpa
Related article:
GDPR and your data rights with Timecounts
Need help?
If you have questions about our subprocessors or privacy practices, contact:
