Service providers & subprocessors
Last updated: April 14, 2026
To support Runway Financial, Inc. ("Runway") in delivering its FP&A platform Services, Runway engages service providers and subprocessors to assist with data processing activities on behalf of Runway's customers as defined in our Terms of Service and Data Processing Agreement.
What is a Subprocessor?
When Runway engages third party service providers in our capacity as a data processor for our customers' personal data, the General Data Protection Regulation ("GDPR") and other global privacy frameworks call these third-party service providers subprocessors. Subprocessors are service providers who have or potentially will have access to or process personal data that Runway processes for, and on behalf of, Runway's customers.
This page outlines the types of service providers and subprocessors we utilize, where they are located, and a description of the work they carry out.
Due Diligence
Before engaging any service provider (including subprocessors), we perform due diligence, including vendor security assessments. Our service providers are subject to contract terms designed to ensure that these service providers process personal data only for the purposes of providing services to Runway and in accordance with our commitments to customers and applicable data protection laws.
List of Subprocessors
Infrastructure & Data Storage
Core infrastructure providers that store and process customer data.
| Name | Data | Purpose of processing | Entity country |
|---|---|---|---|
| Snowflake Inc. | Customer integration data including HRIS data (employee information), CRM data, accounting data | Cloud data warehouse for storing and processing customer integration data | United States |
| Google Cloud Platform | Customer data, user data, and application data | Cloud infrastructure provider for Postgres database hosting | United States |
| Vercel Inc. | User interaction data and session information | Frontend application hosting and deployment platform | United States |
| Google Firebase | User authentication credentials and user names | User authentication and credential storage | United States |
| Elastic Search | Customer data, user data, and application data | Index and search application data | United States |
| Cloudflare, Inc. | User IP addresses, HTTP request metadata, and web traffic data processed in transit | DNS hosting, CDN, DDoS protection, and traffic proxying for runway.com | United States |
AI Services
Services that process customer inputs and related context to power AI features when customers use them.
| Name | Data | Purpose of processing | Entity country |
|---|---|---|---|
| OpenAI | Customer prompts, uploaded files/attachments, relevant customer data context included in AI requests | AI model inference and realtime assistant/explanation features | United States |
Data Integration Services
Services that import customer data when customers actively opt into integrations.
| Name | Data | Purpose of processing | Entity country |
|---|---|---|---|
| Fivetran Inc. | HRIS data (employee information), CRM data, accounting data, dynamic imported data - when customers opt in | Data pipeline service for importing customer data from various sources | United States |
| Merge.dev | HRIS data, CRM data, accounting data, dynamic imported data - when customers opt in | Unified API platform for importing customer data from various sources | United States |
| Workato, Inc. | HRIS data, CRM data, accounting data, dynamic imported data - when customers opt in | Integration platform for importing customer data from various sources | United States |
Analytics & Monitoring
Services that collect and analyze user behavior and system performance data.
| Name | Data | Purpose of processing | Entity country |
|---|---|---|---|
| Segment.io | Website visitor data and marketing analytics data | Marketing website analytics and visitor tracking | United States |
| Amplitude Inc. | Product usage data, user interaction data, and user identifiers | Product analytics and user behavior tracking | United States |
| Google Analytics | Website visitor data, user behavior data, and web traffic analytics | Marketing website analytics and visitor behavior tracking | United States |
| Webflow, Inc. | Website visitor data and form submissions | Marketing website hosting, content management, and analytics | United States |
| Datadog, Inc. | Backend performance data, system logs, and potentially user email addresses for error tracking | Backend performance monitoring and system observability | United States |
| Sentry | Error logs, debugging information, and potentially user email addresses | Bug tracking and error monitoring | United States |
Customer Support & Communications
Services used for customer relationship management and support.
| Name | Data | Purpose of processing | Entity country |
|---|---|---|---|
| HubSpot, Inc. | Customer contact information, support tickets, CRM data, and communication history | Customer relationship management and support ticketing | United States |
| Slack Technologies, Inc. | Customer communication data, support conversations, and user information shared in support channels | Customer support communications and internal team collaboration | United States |
| Google Workspace | Email communications, shared documents, spreadsheets that may contain customer data, and collaboration data | Email services and document collaboration with customers | United States |
| DocuSign, Inc. | Business User data | eSignatures | United States |
Payment Processing
| Name | Data | Purpose of processing | Entity country |
|---|---|---|---|
| Stripe, Inc. | Customer billing information, payment data, and transaction records | Payment processing and subscription management | United States |
Data Residency Services
| Name | Data | Purpose of processing | Entity country |
|---|---|---|---|
| GDPR Local | EU and UK customer data that requires local representative services, data protection inquiries | GDPR Article 27 EU/UK Representative services and data protection compliance support | United Kingdom |
Updates to this Page
Due to the nature of our global business and the volume of customers, our business needs and service providers may change from time to time. For example, we may deprecate a service provider to consolidate and minimize our use of service providers. Similarly, we may add a service provider if we believe that doing so will enhance our ability to deliver our Services.
We will periodically update this page to reflect additions and removals to our list of service providers and subprocessors. For more information on Runway's privacy practices, please visit our Privacy Policy. If you have any questions regarding this page, please contact us at security@runway.com or through our support channels.