Effective Sep 29, 2026
Subprocessors
The companies that process customer data on Altruvia's behalf to run the service.
Customer organizations decide what donor and contact data they put into Altruvia; Altruvia processes it on their behalf. To run the service we use the companies below, and each may use the data only to provide its service to us.
We update this page when we add or replace a subprocessor, and the effective date above shows when it last changed.
Infrastructure and service operations
These providers are used for every customer organization.
Cloudflare, Inc.
- What it does for us
- Hosts and runs the application and background jobs (Workers and Workflows), stores uploaded files (R2), and indexes documents a customer uploads so that AI features can search them (AI Search).
- Data it handles
- All data in the service, including donor and contact records in transit and uploaded files.
- Location
- Global network
Neon, Inc.
- What it does for us
- Managed Postgres databases. Each customer organization has its own database.
- Data it handles
- All records a customer organization stores in Altruvia.
- Location
- United States (Amazon Web Services)
Amazon Web Services, Inc. (SES)
- What it does for us
- Sends transactional and organization email, such as sign-in codes, receipts and notifications.
- Data it handles
- Recipient email address, name, and the content of the message sent.
- Location
- United States (us-east-1)
Amazon Web Services, Inc. (S3 and GuardDuty)
- What it does for us
- Scans uploaded files for malware with GuardDuty Malware Protection for S3 before they are made available. A copy of each uploaded file is held temporarily in an S3 bucket for the scan.
- Data it handles
- Files uploaded by users.
- Location
- United States (us-east-1)
Stripe, Inc.
- What it does for us
- Processes donations and payments for customer organizations, and our own subscription billing.
- Data it handles
- Payer name, email, billing details and payment method details entered on Stripe-hosted fields, and transaction amounts.
- Location
- United States and other countries where Stripe operates
Trigger.dev, Inc.
- What it does for us
- Runs some of our background jobs, such as imports and scheduled tasks.
- Data it handles
- Job inputs, which can include record identifiers and contact details for the job being run.
- Location
- Trigger.dev managed cloud
PostHog, Inc.
- What it does for us
- Product analytics for signed-in users of the application, unless the user has opted out.
- Data it handles
- Pages viewed, feature-usage events, device metadata, account identifier, email address and organization.
- Location
- United States
Functional Software, Inc. d/b/a Sentry
- What it does for us
- Error and performance diagnostics.
- Data it handles
- Error reports scrubbed of message contents, form values and donor records; an internal account identifier.
- Location
- United States
AI features
Used only when a customer organization's users use an AI feature. Requests go through Cloudflare AI Gateway, which routes each one to a third-party AI model provider. The underlying providers may change over time. We do not train AI models on customer data without the organization's explicit consent.
Cloudflare AI Gateway
- What it does for us
- Routes AI requests to model providers and logs them for operational monitoring. Logs are kept on a rolling basis, with the oldest deleted first once the log limit is reached. Responses are not cached.
- Data it handles
- The prompt for the feature being used and the response, which can include donor and beneficiary details from the customer organization's records.
- Location
- Global network
AI model providers (routed via Cloudflare AI Gateway)
- What it does for us
- Generate the text returned by AI features. The provider for a request is chosen by the gateway and can change over time.
- Data it handles
- The prompt for the feature being used, which can include donor and beneficiary details from the customer organization's records.
- Location
- Depends on the provider
Connected services
These providers process data only when a customer organization connects its own account to Altruvia. Data moves between Altruvia and the provider in the direction the organization sets up. Each provider is also independently responsible to the organization under its own terms.
Google LLC
- What it does for us
- Sign-in with a Google account, and import of the Google Drive and Google Sheets files a user picks.
- Data it handles
- The connected account's email address and name, and the contents of files the user selects. See the Privacy Policy for how Google user data is used.
- Location
- United States and other countries where Google operates
Microsoft Corporation
- What it does for us
- Connects a Microsoft account to read OneDrive files and to read and write calendar events and online meetings.
- Data it handles
- The connected account's profile, files, calendar events and meeting details.
- Location
- United States and other countries where Microsoft operates
Intuit Inc. (QuickBooks)
- What it does for us
- Syncs accounting records with QuickBooks.
- Data it handles
- Contacts, donations, payments and refunds.
- Location
- United States
Salesforce, Inc.
- What it does for us
- Syncs contact and donation records with Salesforce.
- Data it handles
- Contacts, gifts, campaigns and recurring donations.
- Location
- Depends on the customer's Salesforce account
Mailchimp (Intuit Inc.)
- What it does for us
- Syncs email audiences and campaigns with Mailchimp.
- Data it handles
- Contact names, email addresses and communication preferences.
- Location
- United States
Givebutter, Inc.
- What it does for us
- Imports donations, campaigns and contacts from Givebutter.
- Data it handles
- Donor contact details and gift records.
- Location
- United States
DocuSign, Inc.
- What it does for us
- Sends documents for electronic signature.
- Data it handles
- Signer name and email address, and the document to be signed.
- Location
- United States and other countries where DocuSign operates