Last updated: 1 December 2025
A current list of third-party service providers who process data for Timecounts.
Timecounts engages the following third-party entities to support the delivery of the Services. Prior to working with any subprocessor, Timecounts reviews their privacy, security, and confidentiality practices. Subprocessors process only the limited personal data required to perform their function.
Infrastructure Subprocessors
These subprocessors are used to host and run the Timecounts application.
Subprocessor | Purpose | Location |
Amazon Web Services (AWS) | Cloud infrastructure and hosting | United States |
Heroku (Salesforce) | Application hosting and deployment | United States |
Cloudflare | CDN, DNS management, DDoS protection, SSL termination | United States |
Google Analytics | Website analytics, device and IP data | United States |
Service Subprocessors
These subprocessors are used to provide specific functionality within the Timecounts service.
Subprocessor | Purpose | Location |
Intercom | Customer support, help center, in-app messages, onboarding, and targeted product communication | United States |
Stripe | Payment processing | United States |
Xero | Accounting and invoice management | United States |
Mandrill/Mailchimp (Intuit) | Transactional and notification emails | United States |
Google Workspace | Internal communication, email, meetings, and document storage | United States |
Uploadcare | File and document upload storage | United States |
Checkr | Volunteer background checks | United States |
Double The Donation | Donation matching enrichment | United States |
Twilio | SMS messaging | United States |
Sentry | Error monitoring | United States |
Vimeo | Video hosting and in-app tutorial playback | United States |
Updates
Timecounts will provide at least 30 days’ notice before adding or replacing a subprocessor, in accordance with our Data Processing Agreement (DPA).
Any changes will be posted here.
What is a subprocessor?
A subprocessor is a third party engaged by Timecounts, or by our affiliates, to process personal data on our behalf. Subprocessors help us operate the platform and deliver the services our customers rely on.
Why does Timecounts use subprocessors?
Infrastructure subprocessors
Our infrastructure subprocessors include cloud service providers and hosting partners. They store and process customer data, support performance, and ensure the security and reliability of the Timecounts platform.
Service subprocessors
Our service subprocessors provide specific functionality within Timecounts such as customer support, payments, messaging, email delivery, background checks, document uploads, and analytics.
Do you have Data Processing Agreements (DPAs) in place with subprocessors?
Yes. Timecounts works only with subprocessors who include data protection terms in their standard service agreements or who provide a Data Processing Agreement that we review and accept as part of account setup. These agreements contain data protection obligations that align with the safeguards we apply to our own systems. They help ensure customer personal data is protected from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
Do you use Standard Contractual Clauses (SCCs) or other transfer mechanisms?
Timecounts maintains appropriate data transfer mechanisms for any international data flows. Depending on the provider, this may include Standard Contractual Clauses, adequacy decisions, or participation in recognized data privacy frameworks. These mechanisms help ensure all transfers of personal data remain lawful and protected.
Where can I get more information about subprocessors?
You can view our current list of subprocessors above or contact us at [email protected] with any questions.