Data Subprocessors

Last updated: October 26, 2026

PerkUp uses a limited number of third-party subprocessors to deliver the platform. Each one processes customer data only to provide its service to PerkUp, under a data processing agreement with safeguards appropriate to its location; where a vendor receives no customer personal data, the table says so.

Subprocessors

Name

Purpose

Location

Google LLC (Cloud Platform, Firebase, Google Analytics)

Cloud hosting, database, authentication, storage and app analytics

USA (global)

Stripe

Payment processing and card programs

USA

Finch

HRIS roster synchronization

USA

WorkOS

Single sign-on and directory sync

USA

Nango

Integration connectivity

USA

Flatfile

Roster and data imports

USA

Resend

Transactional email

USA

Shopify

Storefront and order fulfillment

Canada

Amazon Business

Marketplace purchasing and delivery

USA / Canada

Xoxoday (Plum)

Gift card and reward fulfillment

Singapore / India

Intercom

Customer support

USA

Front

Customer support (shared email inbox)

USA

LogRocket

Session replay and error monitoring

USA

Segment (Twilio)

Product analytics

USA

Anthropic

AI-assisted product-catalog enrichment and content generation (no customer personal data)

USA

OpenAI

AI tooling used by PerkUp staff (no customer personal data)

USA

Cloudflare

CDN, DNS and edge security

USA (global)

Zonos

Landed-cost (duties and tax) calculation on international orders

USA

AfterShip

Delivery tracking and shipment-status notifications

USA / Hong Kong

ShipStation (ShipEngine / Auctane)

Shipping labels and rates

USA

PerkUp fulfillment, swag suppliers & third-party logistics partners

Warehousing, kitting, print-on-demand production and shipping of physical goods

Canada, Mexico, USA, UK, Europe, UAE, India, Australia, China, Hong Kong

Carriers and customs authorities

Carriers, postal operators, and customs authorities receive recipient names, delivery addresses, and shipment details as needed to deliver and clear shipments. They determine their own processing of that data as independent controllers, not subprocessors, and are therefore not listed in the table above.

Changes to this list

We update this page when we add or replace a subprocessor, and we give at least thirty (30) days’ advance notice before a new subprocessor processes customer personal data. To receive notification of changes, email legal@perkupapp.com with the subject “Subprocessor updates” and we will notify you before a new subprocessor processes your data.