Sub-processors.
Every outside company that handles personal data for Symphonia: what it does, what it receives, where it is, and whether it is always used or only when a parish turns a feature on.
Last updated 6 October 2026
Overview
A sub-processor is a company we use to run Symphonia that handles personal data on a parish’s behalf. This page is part of our Data Processing Agreement. We update it at least thirty days before adding or replacing a sub-processor that handles parish personal data.
1. Used for every parish
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Ethernet Servers Ltd | Provides the server that runs Symphonia, its database, and our self-hosted document, chat, and mail tools | All data stored in Symphonia | Los Angeles, California, USA (a UK company) |
| Cloudflare, Inc. (R2 storage) | Stores database backups and uploaded files | Backups, encrypted before upload; uploaded photos, recordings, documents, and certificates; generated giving statements | Cloudflare network, no region restriction set |
| Cloudflare, Inc. (DNS and Workers) | Runs our domain names and an off-site uptime monitor | Domain names and server addresses; no parish personal data | Global |
| Amazon Web Services, Inc. (Simple Email Service) | Delivers every email: sign-in codes, parish messages and bulletins, receipts, and form notices | Recipient names and email addresses, message contents, and delivery, bounce, and complaint reports | USA (Virginia) |
| Amazon Web Services, Inc. (Key Management Service) | Protects the root key behind field encryption | No personal data; only an encrypted key | USA (Virginia) |
2. Used only when a parish or person turns a feature on
| Provider | What it does | What it receives | Where | Used when |
|---|---|---|---|---|
| Stripe, Inc. | Online giving, store, event, and invoice payments, and billing for paid plans | Donor name and email, amount and fund; card and bank details are entered on Stripe’s own pages | USA | Only if your parish connects Stripe to take payments, or has a paid plan |
| Apple Inc. (Apple Push Notification service) | Notifications to the Symphonia iPhone app | Device token, and the notification’s title and text | USA | Only for people who use the iPhone app and allow notifications |
| Browser push services (Google, Mozilla, Apple, Microsoft, depending on the browser) | Browser notifications | A push address and delivery timing; the message itself is encrypted so the push service cannot read it | USA | Only for people who turn on notifications in their browser |
| Telnyx LLC | Text messages | Mobile numbers, message text, replies, and delivery status | USA | Not active yet; only once your parish turns on texting, and only to people who agreed to texts |
| Geoapify GmbH | Turns mailing addresses into map points for member maps and house-blessing routes | Member mailing addresses and home map coordinates | Germany | Only while address mapping is switched on; addresses are sent when staff open a member record or a map |
| Giphy, Inc. | GIF search in staff chat | The search words only, sent from our server; GIFs are fetched by our server | USA | Only when someone searches for a GIF in chat |
| Plaid Inc. | Bank feed for reconciliation in ParishBooks | The parish’s bank sign-in goes directly to Plaid; Plaid sends us bank transactions | USA | Only if your parish connects a bank through Plaid |
| Intuit Inc. (QuickBooks Online) | Accounting sync with ParishBooks | Journal entries and memos, which can name donors or payees; we import customer and vendor contact details | USA | Only if your parish connects QuickBooks Online |
| Check (checkhq.com) | Payroll processing | The parish name, employee details and pay | USA | Not active yet. Payroll in Symphonia today is figured in ParishBooks and the parish makes its own deposits and filings; Check is used only once a parish turns on payroll processing |
| Track1099 or Tax1099 | 1099-NEC e-filing through a provider | Payer name, tax ID, and address; each contractor’s name, tax ID, address, email, and pay | USA | Not active. 1099s today are prepared as the IRS IRIS file the parish uploads itself |
| Google LLC (Google Drive) | One-time import of files into Quill | An access token; Google sends us the files the parish chooses | USA | Only if your parish connects Google Drive to import files |
| Microsoft Corporation (OneDrive) | One-time import of files into Quill | An access token; Microsoft sends us the files the parish chooses | USA | Only if your parish connects OneDrive to import files |
| Dropbox, Inc. | One-time import of files into Quill | An access token; Dropbox sends us the files the parish chooses | USA | Only if your parish connects Dropbox to import files |
| Meta Platforms, Inc. (Facebook, Instagram and Threads) | Publishes the posts a parish chooses to its own Facebook Page, Instagram account and Threads account, and reports likes, comments, shares and reach | The words, photos and videos of each post with their descriptions, and an access key for the parish’s accounts; Meta tells us when someone removes Symphonia from their account | USA | Only if your parish connects a Facebook Page, Instagram account or Threads account |
| Bluesky Social, PBC | Publishes the posts a parish chooses to its own Bluesky account, and reports likes, replies and reposts | The words and photos of each post with their descriptions, and an app password the parish made for Symphonia | USA | Only if your parish connects a Bluesky account |
3. Services your browser contacts on some pages
These services are not sent parish records, but your browser contacts them directly on some pages, so they can see your IP address and browser details.
| Provider | Where it appears | What it receives | Where |
|---|---|---|---|
| Google LLC (Google Fonts) | Parish website themes and themed emails that use Google-hosted typefaces, and our own error page | Visitor IP address and browser details | USA |
| Unsplash | Sample photographs in parish website themes, until a parish replaces them | Visitor IP address and browser details | Global image network |
| Stripe, Inc. | Stripe’s own checkout pages, when someone pays | Payment details and Stripe’s own cookies | USA |
4. Run on our own server, not by a sub-processor
- Quill’s drive, documents, forms, tasks, and chat (Nextcloud, Collabora, and OnlyOffice).
- Parish mail hosted by Symphonia (Stalwart).
- The optional AI helpers. They run on our own server, and no parish data is sent to an outside AI service.
- Malware scanning of uploads, error tracking, and sign-in location checks.
Services we use that receive no personal data: Let’s Encrypt (security certificates) and orthocal.info (lectionary readings, fetched by our server).
A parish can also send its own data to services it chooses, for example through webhooks, Zapier, or its own mail host. Those are the parish’s own arrangements, not our sub-processors.
Questions or objections about a sub-processor? Write to us.