Subprocessor list

Fundraise Up engages the third parties listed below to help deliver the Fundraise Up Platform (the “Service”). Where our nonprofit customers are controllers of personal data processed through the Service, these third parties act as subprocessors. This list is incorporated into our Data Processing Addendum.

Each subprocessor is engaged under a written agreement containing data protection obligations no less protective than those in our Data Processing Addendum. Where personal data is transferred out of the European Economic Area, the United Kingdom or Switzerland, the transfer is made under the EU Standard Contractual Clauses, together with the UK International Data Transfer Addendum where applicable, or under another lawful transfer mechanism such as the EU-U.S. Data Privacy Framework where the recipient is certified.

We will notify customers at least 30 days before adding or replacing a subprocessor. To receive those notifications, subscribe at privacy@fundraiseup.com. Customers may object to a new subprocessor in accordance with our Data Processing Addendum.

This list does not include software that Fundraise Up runs on its own infrastructure, or tools that receive no customer or donor personal data. Where more than one provider is listed for the same purpose, we may engage any of them for that purpose.

Engaged for every customer. These providers host or transit all Customer Data processed through the Service.

Engaged where the relevant feature is in use. These providers receive donor or supporter data as part of delivering a specific capability of the Service.

Engaged where a customer or a donor contacts us, and where customer correspondence, meetings and records are handled. These systems hold personal data of customer personnel, and may hold donor details where a customer or donor includes them in a message, ticket or meeting.

Engaged only where a Customer activates the integration in its Fundraise Up account. In each case the purpose is to transfer donation and donor records into the system the Customer has chosen, and the Customer is the controller of that destination system. No data is sent to any provider in this section unless the integration is switched on.

These providers process donation payments. Each determines its own purposes and means for the payment data it receives and acts as an independent controller rather than as a subprocessor of Fundraise Up. Which of them are engaged depends on the payment methods the Customer enables in its Fundraise Up account. They are listed here so that customers have a complete picture of where donor data goes; their own privacy notices govern their use of it.