Subprocessors
Last updated November 3, 2026 · Version 2026-11-draft.1
Draft pending review by counsel. This document is not yet in effect and may change before launch. Questions: legal@payrollgrove.com
The third parties and affiliates that help PayrollGrove run the Service and may process customer data.
Our approach
PayrollGrove runs on infrastructure we operate ourselves, so the list of companies that can touch customer data is deliberately short. Every subprocessor is bound by written data protection terms at least as protective as our Data Processing Addendum, and all processing takes place in the United States.
Current subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| [PROVIDER NAME] | Infrastructure host: the virtual machine and storage that run PayrollGrove. Disks are encrypted at the hypervisor level. The provider does not operate our software or hold our encryption keys | All Service data, encrypted at rest (restricted fields are additionally encrypted by PayrollGrove) | United States |
| Shield Management (affiliate) | Transactional email relay (DKIM-signed mail for payrollgrove.com) | Recipient email address and message content (notifications never contain restricted values such as Social Security or bank numbers) | United States |
| Shield Management (affiliate) | Offsite backup storage over SFTP | Encrypted database backups and encrypted file backups; Shield Management cannot decrypt them | United States |
| Shield Management (affiliate) | Security monitoring of the host (intrusion detection and file integrity monitoring) | System and security logs; no customer records | United States |
What we do not use
- No analytics or advertising services on the website or in the application.
- No third-party error tracking. Errors are handled by our own systems.
- No payment processor at launch. Subscriptions are invoiced and paid manually. We plan to add Stripe for card and bank payments; it will be listed here at least 30 days before it processes any data.
- No AI or machine-learning providers receive customer data.
Changes to this list
We will update this page and notify account owners by email at least 30 days before a new subprocessor begins processing customer data. To object on reasonable data protection grounds, write to privacy@payrollgrove.com within that period; the process is described in section 6 of the DPA.