GoRefer Trust Center
Sub-processors
Updated October 2026
These are the companies that receive data to help GoRefer run the service, what each one receives and why. Integrations your firm chooses to connect are listed separately: they receive data only if your firm connects them.
Some providers must read data to do their job. Our AI provider reads uploaded documents, messaging providers carry message content, and payment providers receive billing details. Our Data Processing Addendum sets out how we handle your firm's data and our duties for the providers we use.
New service providers
We email account administrators before a new service provider receives firm data.
Service providers
Updated October 2026
The companies GoRefer uses to run the service. Each one receives only the data it needs for the purpose shown.
Hosting & Storage
2 providers
| Provider | Data Sensitivity | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Google Cloud | High | Application hosting and database (Google LLC). | All account, firm and client data stored in GoRefer Sensitive client fields (stored encrypted) Application logs | |
| Amazon Web Services | High | File storage, including academy course media (videos, files and images) and certificates. Email delivery and delivery notifications. Nightly database backups (encrypted before upload). | Uploaded documents and files Academy course media and certificate files Email addresses and email content Encrypted copies of the database (backups) | United States |
Security
1 provider
| Provider | Data Sensitivity | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Cloudflare | Low | Bot checks on firm landing-page forms and webinar sign-up forms. | IP address Browser information used for the check |
Payments
1 provider
| Provider | Data Sensitivity | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Stripe | High | GoRefer subscription billing. Client invoice payments that firms take on their own Stripe accounts, where the firm is the merchant of record. GoRefer's platform fee, shown on our pricing page and in your account, is deducted automatically from each client payment. Preparer payouts a firm sends from its own Stripe account, on the firm's instruction. GoRefer never holds or moves those funds. Payouts to GoRefer's own affiliate partners. Academy payments: a learner pays for a course on the selling firm's own connected Stripe account, where the firm is the merchant of record. | Billing contact details Card and bank details (held by Stripe, not GoRefer) Invoice and payment records Academy learners' names, email addresses and payment details, for course purchases on a firm's connected Stripe account Preparer names, email addresses and payout amounts, for payouts a firm sends from its own Stripe account |
Messaging & Calls
1 provider
| Provider | Data Sensitivity | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Twilio | High | Text and picture messages, phone calls, voicemail and its transcription, phone numbers and carrier registration. If a firm records calls, the recordings and their transcription. | Phone numbers Message content and media Voicemail and call audio Transcripts Firm business details for carrier registration |
AI
2 providers
| Provider | Data Sensitivity | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Microsoft | High | AI processing for Gio, including the text and images Gio produces for academy courses, and reading uploaded tax documents. | Gio requests and chats, which can include client names and case details Academy course text and images that Gio drafts or reads for a firm Uploaded tax documents, read to extract their text, including any numbers printed on them Social Security numbers, ITINs, EINs and bank account and routing numbers are masked before text is sent to an AI model. Masking can miss a number written in an unusual way. | |
| ElevenLabs | High | Voice assistant. | Client details the voice assistant needs to answer The conversation (voice and text). What an administrator says aloud reaches ElevenLabs as spoken audio and is not masked. Gio asks ElevenLabs not to record the voice and to keep each conversation for the shortest time its plan allows, and deletes it when the call ends. |
Rewards
1 provider
| Provider | Data Sensitivity | Purpose | Data Processed | Location |
|---|---|---|---|---|
| CMI | Medium | Gift certificates that firms send as rewards (Creative Marketing Incentives). | The recipient's email address |
Monitoring & Analytics
3 providers
| Provider | Data Sensitivity | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Sentry | Low | Error monitoring for the GoRefer app. Session replay is turned off. | Error details Request details User ID Browser and device details | |
| HeyCatch | Low | Analytics on GoRefer's public marketing website (gorefer.io). Not loaded inside the signed-in application, and not loaded when the browser sends Do Not Track or Global Privacy Control. | Pages visited and referrer (marketing site only) Interactions on public pages Browser and device details, language and time zone Approximate location from IP address | |
| Meta Platforms | Medium | Measurement of GoRefer's own advertising, on the public marketing website (gorefer.io) and webinar registration pages (app.gorefer.io/webinar/). Not loaded, and nothing sent from our servers, when the browser signals Do Not Track or Global Privacy Control. Not loaded inside the signed-in application. A tracking tag a firm adds to its own landing page reports to that firm's own Meta account and is not covered by this entry. | Ad click identifiers IP address and browser details Name, email and phone number (webinar registrations only) Public page addresses and event names |
Website & Newsletter
2 providers
Apps
1 provider
| Provider | Data Sensitivity | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Apple | Medium | Push notifications for the GoRefer admin app for iOS, used by GoRefer staff. | Device push tokens Notification text, which can include a contact's name and a short message preview |
Integrations your firm chooses to connect
Updated October 2026
These services receive data only if your firm connects them. A staff member can also link a mailbox from another email provider; that provider receives the email sent and read through it.
| Provider | Data Sensitivity | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Zapier | Medium | Receives the events your firm sends to a Zapier webhook it sets up, such as new leads or referrals. | The event details your firm chooses to send, which can include names and contact details | |
| Intuit QuickBooks | Medium | Adds your firm's clients as customers in your firm's QuickBooks Online account. | Client names Client email addresses and phone numbers | |
| Google Workspace | Medium | Google Calendar for appointments and Google Sheets for imports and exports, when your firm connects them. A staff member's own Gmail or Google Workspace mailbox, when they link it to read and send email in GoRefer. | Appointment details The rows your firm imports or exports Email sent and read through a linked mailbox | |
| Zoho Mail | Medium | A staff member's own Zoho mailbox, when they link it to read and send email in GoRefer. | Email sent and read through a linked mailbox | |
| Gusto | Medium | Payroll files your firm downloads from GoRefer and uploads to Gusto itself. GoRefer does not send data to Gusto. | Names and pay amounts in the file |