We use third party subprocessors, such as cloud computing providers and customer support software, to run Basecamp. We establish GDPR-compliant data processing agreements with each subprocessor, extending GDPR safeguards everywhere personal data is processed.

The following is a list of personal data subprocessors we use. These subprocessors are all located in the United States:

• Amazon Web Services: Cloud services provider
• AppSignal: Performance monitoring tools
• Braintree: Payment processing services
• Cloudflare: Cloud services provider
• hCaptcha: Anti-bot protection
• Help Scout: Help desk software
• Sentry: Error reporting software
• TaxJar: Sales tax calculation