Data Centers






Colocation space and IT infrastructure providers.

What data is shared: dedicated colocation space at data centers used for all storage and processing needs. Data is backed up in real time across all three data centers

Amazon Web Services (AWS)

Subsidiary of that provides on-demand cloud computing platforms.

What data is shared: Receipt Images and encrypted long term storage of all data that is more than 90 days inactive.



Customer messaging platform provider

What data is shared: Any data shared by our customers with our support agents is stored on the app’s cloud.



Web-based all-in-one sales platform provider that features tools for email, phone dialing, pipeline management, forecasting and reporting.

What data is shared:

  • Company Data, e.g. business name, website, address, size.
  • Individual Data - User first/last name, emails, and contact phone number.
  • Customer Contracts – Terms of Service, Statements of Work, Confidentiality Agreements

Google Suite

Cloud computing, productivity and collaboration tools, software and products provided by Google.

What data is shared: All correspondence with our customers, including any data/documents shared with us via email is routed through Gmail servers.  


Urban Airship

Urban Airship is a mobile engagement platform and digital wallet solution.

What data is shared: Push notification related data and user’s unique identifier on Expensify (accountID) are stored on Urban Airship for 30 days.


Stripe provides the technical, fraud prevention, and banking infrastructure required to operate on-line payment systems.

What data is shared: Billing Card Info - Card Number, Expiration Date, CVV, Billing Address, Full Name


Slack is a cloud-based set of proprietary team collaboration tools and services.

What data is shared: User Emails and internal communication



Platform that provides real-time insight into your mobile apps performance.

What data is shared: Crash traces from Android and user’s unique identifier on Expensify (accountID)  are kept for 90 days.



Provides analytics infrastructure to track user behavior on our web/mobile apps.

What data is shared: User Emails

Stay in the loop

Sign up to receive an email when any changes are made to our list of subprocessors.