Subprocessors
The companies and services CapitolMath uses that process customer personal data on our behalf. Each is bound by a data processing agreement — except the U.S. Census Bureau, a federal agency whose public geocoder offers none, and which receives only a map point — and we give 30 days' notice before adding one, as the DPA commits.
Last updated November 5, 2026
Current subprocessors
| Company | What for | Personal data | Where |
|---|---|---|---|
| DigitalOcean, LLC | Hosting: the web application, the managed PostgreSQL database, the server that runs the data pipeline and delivers webhooks, and file storage (Spaces). | Everything CapitolMath stores (see the data map on the privacy policy). | United States |
| PropelAuth, Inc. | Sign-in: passwords, sign-in links and email confirmation, and the record of which accounts each person belongs to. | Members' names, email addresses, and sign-in records. Passwords are handled by PropelAuth and never reach CapitolMath. | United States |
| Stripe, Inc. | Subscriptions, invoices and card payments. | The billing contact's name and email, the billing address, and payment details. Card numbers go straight to Stripe; CapitolMath never sees them. | United States |
| Resend | Sending CapitolMath's own email: invitations, bill and calendar notifications, usage alerts, support requests and replies, and webhooks set to deliver by email. | Recipients' email addresses and the content of each message. | United States |
| Anthropic, PBC | AI features, such as asking questions about the data in plain language, only when a member uses one; and the Weekly digest's written summary, for a member who receives it, unless their organization's Owner or Admin turns AI writing of the digest off. (Anthropic's models also write bill summaries and topics from public legislative text; that involves no customer data.) | What a member asks an AI feature, and the records needed to answer it; for the Weekly digest, the facts of that member's week (bill numbers and titles, dates, counts and colleagues' names — never a note's text or a task's words). Anthropic's commercial terms don't allow it to train models on this. | United States |
| Mapbox, Inc. | Find my legislators: suggesting full addresses as someone types one into a scorecard's filters, in CapitolMath or in a published scorecard widget. | The address text as it's typed. It's sent from CapitolMath's servers, so Mapbox doesn't see the person's IP address, and CapitolMath doesn't keep the address. | United States |
| U.S. Census Bureau | Find my legislators: which legislative and congressional districts contain the address someone chose, from the Census Bureau's public geocoder. | The map point (latitude and longitude) of the chosen address — not the address itself. It's sent from CapitolMath's servers, so the Census Bureau doesn't see the person's IP address. A federal agency's public service: there's no data processing agreement; its privacy policy applies. | United States |
CapitolMath uses no third-party analytics, advertising or error-tracking services.
Services that don't receive your data
Listed so the boundary is explicit. None of these is a subprocessor, because none receives customer personal data from us.
| Service | Why it isn't a subprocessor |
|---|---|
| Firecrawl, and the legislatures' own websites | Used to collect the public record — bills, votes, calendars. Nothing about you or your account is sent. |
| Your webhook destinations | Slack, Microsoft Teams and HTTPS endpoints you configure receive what you told CapitolMath to send them. They are transfers you direct, not processing on our behalf. |
Hear about changes
Leave an email address and we'll write before a subprocessor is added or changed — at least 30 days before a new one receives any data. You don't need a CapitolMath account. We'll send a link to confirm first, and every notice has an unsubscribe link.