Get in touchSub-processors
Last updated
To support TaxDo in delivering its Services, we engage service providers, sub-processors and group companies to assist with our data processing activities on behalf of our customers. This page sets out who they are, where they are, and what they do.
Summary of changes
We update this page to reflect additions and removals, and summarise the most recent changes here so that you do not have to compare versions.
July 14, 2026 — first publication. No changes to report.
What is a sub-processor?
Where TaxDo engages a third party in our capacity as a processor for our customers' personal data, the General Data Protection Regulation and a number of other privacy frameworks call that third party a sub-processor. Sub-processors are service providers that have, or may have, access to personal data that TaxDo processes for and on behalf of our customers.
Service providers, by contrast, support our own operations and our website. They do not have access to the information our customers submit to the Services.
Due diligence
Before engaging any service provider, including a sub-processor, we carry out due diligence including a security assessment. Our service providers are subject to contract terms designed to ensure that they process personal data only for the purposes of providing services to TaxDo, and in accordance with our commitments to our customers and applicable data protection law.
List of sub-processors
| Name | Data | Purpose of processing | Entity country |
|---|---|---|---|
| Amazon Web Services, Inc. | Data our customers submit to the Services, and the results returned | Cloud service provider hosting the Services | United States |
| Cloudflare, Inc. | Request metadata and IP addresses; encrypted backups | Content delivery, DNS, web application firewall and object storage | United States |
| Anthropic, PBC | Data our customers submit to tax document verification, where that optional feature is enabled | Provide AI technology for tax document verification. This feature is optional and off unless a customer enables it. It is not used in official validation, indirect tax or regulatory compliance Services, and data returned by those Services is never passed to it. | United States |
List of service providers
The list below sets out some key third parties TaxDo works with across our business and our website.
| Name | Data | Purpose of processing | Entity country |
|---|---|---|---|
| DigitalOcean, LLC | Internal systems data | Cloud infrastructure for internal and supporting systems | United States |
| Hetzner Online GmbH | Internal systems data | Cloud infrastructure for internal and supporting systems | Germany |
| Stripe, Inc. | Billing contact and transaction data | Payment processing | United States |
| PayPal Holdings, Inc. | Billing contact and transaction data | Payment processing | United States |
| Wise Payments Limited | Payer name, bank details and payment references | Bank transfer and wire collection | United Kingdom |
| Twilio Inc. (SendGrid) | Email addresses and message content | Transactional email delivery | United States |
| Amazon Web Services, Inc. (SES) | Email addresses and message content | Product and marketing email delivery | United States |
| Plivo Inc. | Phone numbers and message content | SMS and voice notifications | United States |
| CloudTalk s.r.o. | Phone numbers, call recordings and metadata | Sales and support telephony | Slovakia |
| HubSpot, Inc. | Business contact data | Customer relationship management platform which stores business contact information and supporting information about the business relationship | United States |
| Google LLC | Visitor data | Website analytics, tag management and advertising measurement | United States |
| Microsoft Corporation | Visitor data | Website analytics, advertising measurement and consent-gated session analytics | United States |
| Meta Platforms, Inc. | Visitor data | Advertising measurement and remarketing | United States |
| Microsoft Corporation (Microsoft 365) | Email content, names, contact details and contract documents | Business email, document storage and collaboration | United States |
| Functional Software, Inc. (Sentry) | Application error logs and performance data | Error logging and monitoring | United States |
| New Relic, Inc. | Application performance data and error traces | Application performance monitoring | United States |
| Slack Technologies, LLC | Names, email addresses and support correspondence | Internal communication and support escalation | United States |
| Notion Labs, Inc. | Business contact and contract details | Internal knowledge management | United States |
| Linear Orbit, Inc. | Business contact details included in issue reports | Issue tracking and product development | United States |
TaxDo group companies
TaxDo Inc. (United States) is currently the only TaxDo entity that processes personal data. Any further group company will be added to this page before it begins processing.
Updates to this page
Our business needs and our service providers change from time to time. We may remove a provider to consolidate and reduce the number we use, or add one where doing so improves our ability to deliver the Services.
We will publish any intended addition or replacement of a sub-processor on this page at least 30 days before the change takes effect, and will additionally notify by email each customer that has subscribed to notifications. To subscribe, email [email protected].
Under our Data Processing Agreement, a customer may reasonably object in writing, on grounds relating to data protection, within that 30-day period. If a customer does not object within that period, the appointment of the new sub-processor is deemed accepted.