Legal
Subprocessors
Last updated: October 8, 2026
This is the list of third parties that may process customer data on behalf of Porchlight.
Current subprocessors
We use these companies to help provide Porchlight. Some are used only when a business turns on a feature, as noted. Each has agreed to protect data and use it only to provide its service to us, except as noted for Stripe.
| Name | Purpose | Data involved | Location |
|---|---|---|---|
| Netlify | Website and application hosting, serverless functions, scheduled jobs and hosted Postgres database | All data handled by the application, in transit and as stored in the database | United States |
| Supabase | Postgres database, authentication and file storage for photos and videos, where a deployment uses them | Account, client, pet and visit records; uploaded media | United States |
| Stripe | Card and bank payments for client invoices (Stripe Connect), and billing for Porchlight subscriptionsStripe acts as an independent controller for much of this data under its own terms. | Payer and payment details, invoice amounts, business identity and bank details | United States |
| Resend | Sending transactional email, such as visit updates, invoices and password resets | Recipient email address, sender name, and message content | United States |
| SignalWire | Sending text messages (SMS) | Recipient phone number and message content | United States |
| Twilio | Backup provider for sending text messages, used only if SignalWire is not available | Recipient phone number and message content | United States |
| Web Push services (Google, Apple, Mozilla and Microsoft) | Delivering browser and phone push notifications to people who turn them on | Push subscription token and notification text | United States and other countries |
| Kit (ConvertKit) | Marketing email: onboarding emails for new trial accounts and the free switching checklist | Owner email address, first name and company name (business owners only, never client or pet data) | United States |
| Anthropic | Optional AI writing assist, such as drafting visit report cards and message replies. Used only when a business turns it on | Text a business chooses to draft from, such as pet names, visit checklist and notes | United States |
| Marketing Hub | Our blog content and privacy-light measurement of visits to the public website. It is not loaded in the signed-in app | Pages viewed, referrer, campaign tags and a random visitor ID. No name, email or account ID | United States |
| Google Fonts | Delivering the typefaces used on our website and app | IP address and browser details sent when fonts load | United States |
| Intuit QuickBooks | Optional accounting sync. Coming soon, and only if a business connects it | Invoice and payment totals, client names | United States |
Changes and notice
When we add or replace a subprocessor, we update this page and email the account owner at least 15 days before the new subprocessor starts processing customer data, as set out in the Data Processing Addendum. To object, or to ask a question, write to hello@porchlight.pet.