Subprocessors
Last updated: October 20, 2026
Atlantic Learn LMS, doing business as Guardian Expense uses the service providers below to host and run Guardian Expense. Each is bound by a written agreement to protect the data it processes and to use it only to provide its service to us.
Current subprocessors
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Google LLC (Google Cloud and Firebase) | Hosts and runs the Service: Firebase Authentication (sign-in, two-step verification, password-reset emails), Cloud Firestore (database), Cloud Storage (receipts, logos, CSV exports), Cloud Functions and Cloud Tasks (server logic and background jobs), Secret Manager (integration and bank-connection credentials), Firebase App Check with reCAPTCHA Enterprise (abuse protection), Firebase Cloud Messaging (push notifications) and Firebase Crashlytics (mobile crash reports). | All Customer Data; account and sign-in data; device push tokens; crash reports. | United States (Firestore nam5; Cloud Functions and Cloud Tasks us-central1). Authentication, Cloud Messaging and Secret Manager replication use Google's global infrastructure. |
| Vercel Inc. | Hosts and delivers the website and the web app's files. The web app talks to Google Cloud directly, so Customer Data does not pass through or stay with Vercel. | Technical request data (IP address, browser, pages requested). | Global edge network; United States. |
| Mailgun Technologies, Inc. (a Sinch company) | Sends transactional email: invitations, email verification, notifications and reminders, and website enquiries to our team. Open and click tracking are off. | Recipient name and email address; email content such as a report's title, submitter, total and return reason (never receipts, merchants or receipt text). | United States. |
| Stripe (Stripe, Inc. and its affiliates) | Subscription billing and card payments through Stripe Checkout and the Stripe billing portal. | Billing contact name and email, billing address and tax details, payment method, organization identifier and number of seats. | United States and Canada. |
| Plaid Inc. | Bank and card connections — only when a user chooses to connect a bank or card account. | Bank credentials entered in Plaid's window (never received by us), account names and last four digits, posted transactions, and a pseudonymous user identifier. | United States. |
| Apple Inc. (Apple Push Notification service) | Delivers push notifications to iPhones, via Firebase Cloud Messaging. | Device token and notification text (no amounts, merchants or receipt content). | United States and Apple's global infrastructure. |
Google LLC (Google Cloud and Firebase)
- Purpose
- Hosts and runs the Service: Firebase Authentication (sign-in, two-step verification, password-reset emails), Cloud Firestore (database), Cloud Storage (receipts, logos, CSV exports), Cloud Functions and Cloud Tasks (server logic and background jobs), Secret Manager (integration and bank-connection credentials), Firebase App Check with reCAPTCHA Enterprise (abuse protection), Firebase Cloud Messaging (push notifications) and Firebase Crashlytics (mobile crash reports).
- Data
- All Customer Data; account and sign-in data; device push tokens; crash reports.
- Location
- United States (Firestore
nam5; Cloud Functions and Cloud Tasksus-central1). Authentication, Cloud Messaging and Secret Manager replication use Google's global infrastructure.
Vercel Inc.
- Purpose
- Hosts and delivers the website and the web app's files. The web app talks to Google Cloud directly, so Customer Data does not pass through or stay with Vercel.
- Data
- Technical request data (IP address, browser, pages requested).
- Location
- Global edge network; United States.
Mailgun Technologies, Inc. (a Sinch company)
- Purpose
- Sends transactional email: invitations, email verification, notifications and reminders, and website enquiries to our team. Open and click tracking are off.
- Data
- Recipient name and email address; email content such as a report's title, submitter, total and return reason (never receipts, merchants or receipt text).
- Location
- United States.
Stripe (Stripe, Inc. and its affiliates)
- Purpose
- Subscription billing and card payments through Stripe Checkout and the Stripe billing portal.
- Data
- Billing contact name and email, billing address and tax details, payment method, organization identifier and number of seats.
- Location
- United States and Canada.
Plaid Inc.
- Purpose
- Bank and card connections — only when a user chooses to connect a bank or card account.
- Data
- Bank credentials entered in Plaid's window (never received by us), account names and last four digits, posted transactions, and a pseudonymous user identifier.
- Location
- United States.
Apple Inc. (Apple Push Notification service)
- Purpose
- Delivers push notifications to iPhones, via Firebase Cloud Messaging.
- Data
- Device token and notification text (no amounts, merchants or receipt content).
- Location
- United States and Apple's global infrastructure.
Services that are not our subprocessors
- NetSuite (Oracle) is your organization's own accounting system. When your administrators connect it, we send approved reports to it on your instructions, under your own agreement with Oracle.
- Your device's operating system. Receipt text is recognized on the device by Apple's Vision framework, Google's ML Kit or your browser; receipt images are not sent to Apple, Google or anyone else for recognition. On Android, the receipt scanner screen is provided by Google Play services.
- App stores. Apple's App Store and Google Play distribute the mobile apps; they do not receive Customer Data from us.
Changes to this list
We notify customers' administrators by email at least 30 days before a new subprocessor starts processing Customer Data, and update this page, as described in section 7 of the Data Processing Addendum. To object to a change, email privacy@guardianexpense.com.
Related: Terms of Service · Privacy Policy · Data Processing Addendum. Questions about this document: legal@guardianexpense.com.