01Current subprocessors
The table below lists the third-party services that may process Customer Personal Data. Material changes (new subprocessors, changes in role) are communicated by email and posted here at least 30 days before they take effect.
| Subprocessor | Purpose | Data location | Country |
|---|---|---|---|
| Amazon Web Services | Cloud hosting, storage | us-east-1, us-west-2 | USA |
| Cloudflare | CDN, DDoS protection, bot management | Global edge | USA / Global |
| Stripe | Payment processing, billing | USA | USA |
| Plaid | Bank account verification & transactions | USA | USA |
| Twilio | SMS, voice, phone numbers | USA, Ireland | USA / EU |
| SendGrid (Twilio) | Transactional email | USA | USA |
| Postmark | Transactional email fallback | USA | USA |
| Mailgun | Marketing email delivery | USA, EU | USA / EU |
| Persona | Identity verification & KYC | USA | USA |
| Onfido | Document verification (international) | UK, USA | UK / USA |
| DocuSign | Electronic signature | USA, EU | USA / EU |
| HelpScout | Customer support ticketing | USA | USA |
| Slack | Internal communications & alerts | USA | USA |
| Linear | Internal issue tracking | USA | USA |
| Notion | Internal documentation | USA | USA |
| Datadog | Infrastructure monitoring, logs | USA, EU | USA / EU |
| Sentry | Error monitoring | USA | USA |
| OpenAI / Anthropic | AI Compliance Copilot inference (no training on Customer Data) | USA | USA |
| Twilio Segment | First-party analytics infrastructure | USA, EU | USA / EU |
| Column N.A. | Banking partner (where applicable) | USA | USA |
| Gusto Embedded | Payroll engine | USA | USA |
02Subprocessors by category
Infrastructure & operations
AWS, Cloudflare, Datadog, Sentry. These vendors operate our application, network, monitoring, and incident response.
Communications
Twilio, SendGrid, Postmark, Mailgun. These vendors deliver outbound email, SMS, and voice communications.
Payments & banking
Stripe, Plaid, Column N.A. These vendors process payments, verify bank accounts, and provide business banking infrastructure.
Identity & document verification
Persona, Onfido, DocuSign. These vendors verify identities for KYC/AML and execute electronic signatures.
AI & analytics
OpenAI, Anthropic, Twilio Segment. AI providers do not train on Customer Data. Analytics tooling is first-party with limited third-party support.
03Subprocessor notifications
To receive email notice when we add or change subprocessors, subscribe at subprocessors.file.business/subscribe or contact dpo@file.business. Notifications are sent at least 30 days before the change takes effect.
Contact our legal team
Questions about this policy go to legal@file.business. Privacy or data requests go to privacy@file.business. Postal mail: File.Business, Inc., 101 N Monroe St, Suite 800, Tallahassee, FL 32301, USA.