| DocuSign |
Electronic signature and agreement management |
ISO/IEC 27001; ISO/IEC 27017; ISO/IEC 27018; SOC 1; SOC 2; SOC 3; PCI‑DSS v4.0; CSA STAR Level 2 |
United States (primary) + EU replicas |
docusign.com |
docusign.com/trust/compliance |
11/13/2018 |
| Earth Class Mail |
Virtual mail scanning & postal mail management |
SOC 2 Type II |
United States – Beaverton (OR) & Frisco (TX); data stored in AWS US |
earthclassmail.com |
legalzoom.com/security |
12/2/2017 |
| FastSpring |
Customer payment processing (merchant of record) |
PCI‑DSS Level 1; SOC 2 Type II; SOC 3 |
United States (AWS US‑East) + EU backup region |
fastspring.com |
trust.fastspring.com/ |
11/17/2020 |
| Flowroute (a BCM One Company) |
US-only call metadata and CDRs |
CCPA and GDPR Compliant |
United States (us-east) |
flowroute.com |
https://flowroute.com/legal/privacy-policy/ |
2/18/2026 |
| Google Cloud (GCP) |
Cloud host for telecommunication system |
ISO/IEC 27001; ISO/IEC 27017; SOC 2; CIS; NIST 800-53; PCI-DSS; CSA STAR Level 2 |
United States (us-east1) |
google.com |
https://www.action1.com/legal/data-processors/ |
2/18/2026 |
| HubSpot |
Email marketing automation & CRM |
ISO/IEC 27001; SOC 2 Type II; SOC 3; CSA STAR Level 1 |
United States (us‑east‑1) or Germany (eu‑central‑1) by customer choice |
hubspot.com |
legal.hubspot.com/security |
6/28/2022 |
| Intuit QuickBooks Online |
Accounting & bookkeeping SaaS |
ISO/IEC 27001; SOC 2; PCI‑DSS Level 1 |
United States (AWS‑hosted) |
quickbooks.intuit.com |
security.intuit.com |
11/30/2017 |
| Onfido (Entrust) |
Identity verification (KYC/AML) |
ISO/IEC 27001; ISO/IEC 27701; SOC 2 Type II; ETSI EN 319 401; iBeta PAD Level 1‑2 |
Ireland, United States (Ohio), Canada (Quebec) |
onfido.com |
www.entrust.com/legal-compliance |
5/28/2025 |
| Salesforce |
CRM & customer support platform |
ISO/IEC 27001; ISO/IEC 27017; ISO/IEC 27018; ISO 22301; SOC 1; SOC 2; SOC 3; PCI‑DSS Level 1; CSA STAR Level 2; FedRAMP Moderate |
United States, Germany (Frankfurt), France (Paris), Japan (Tokyo), Australia (Sydney) – Hyperforce global cloud |
salesforce.com |
trust.salesforce.com/en/compliance/ |
3/22/2018 |
| Twilio |
EU, UK, and International Call Metadata and CDRs |
ISO/IEC 27001; ISO/IEC 27017; SOC 2; PCI-DSS |
United States (US1); Ireland (IE1); Australia (AU1) |
twilio.com |
https://security.twilio.com/ |
2/18/2026 |
| Untitled, LLC |
Visitor Data Enrichment |
CCPA and GDPR Compliant |
United States |
getuntitled.ai |
docs.getuntitled.ai/misc/privacy-and-consent-management |
6/20/2025 |
