Trust center
Subprocessors
Last updated
This page is referenced by our Privacy Policy and incorporated into our Terms of Service.
Subprocessors that process Investor Data
Each of these providers is engaged under written terms at least as protective as Section 14 of the Terms of Service. We update this page at least fifteen (15) days before a new subprocessor begins processing Investor Data, and Scale Plan Sponsors additionally receive email notice of material additions. Sponsors may object on reasonable data-protection grounds as described in Section 14.5(c).
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services | Cloud hosting, storage, and infrastructure | All categories of Sponsor Data and Investor Data at rest and in transit | United States |
| Amazon Bedrock (AWS) | Access layer for the AI models used by AI Features | Document and dealroom content submitted to AI Features; not used for model training | United States |
| Anthropic | Provider of the Claude models accessed through Amazon Bedrock for AI Features | Document and dealroom content submitted to AI Features; not retained after the request and not used for model training | United States |
| Persona | Identity verification, KYC, and KYB | Name, date of birth, address, government-issued ID, selfie image, and biometric comparison performed by Persona (see Privacy Policy §11) | United States |
| ZumRails | Bank account linking and ACH acceptance and disbursement, where a Sponsor enables ACH | Bank account and routing details, account ownership verification, transaction amounts and status | Canada and United States |
| Dropbox Sign | Electronic signature and audit trail | Signer name, email address, IP address, timestamp, signature, and executed documents | United States |
| Stripe | Sponsor subscription billing | Sponsor billing contact, payment card token, card brand, last four digits, and expiration date | United States |
| Amplitude | First-party product analytics within the Platform | Pseudonymous user identifier, feature usage events, device and connection data | United States |
| HubSpot | CRM, customer support, and in-app support messaging | Name, email address, company, support conversation content | United States |
Marketing site vendors
These vendors support the public marketing site at homebasecre.com only. They are not Investor Data subprocessors — they do not receive Investor Data, Platform usage information, or any identity, financial, or investment information, and the notice and objection rights above do not apply to them. We do not use advertising, retargeting, or visitor identification services anywhere in the Services.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Google (Analytics 4 and Tag Manager) | Aggregate marketing site traffic measurement and tag management | Online identifiers and cookie IDs, pages viewed, referrer, approximate geolocation from IP address | United States |
| Beehiiv | Newsletter subscription and delivery | Email address and subscription status | United States |
| Google Workspace (Sheets) | Storage of marketing lead and privacy request submissions | Name, email address, company, and the contents of forms you submit on the marketing site | United States |
| Sanity | Content management for marketing pages and articles | No personal information about site visitors | United States and European Union |
Questions
Email info@homebasecre.com with subprocessor questions or objections.