Subprocessors
Register version v0.1.0-draft. Last updated July 5, 2026. The third parties Measured HRIS engages to process customer and employee data on our behalf.
What this page is
A subprocessor is a third party that Measured HRIS engages to process customer or employee personal data on our behalf. This page is the customer-facing view of our maintained subprocessor register. Providers marked conditional are engaged only when your workspace explicitly connects that integration.
Active subprocessors
| Subprocessor | Purpose | Data categories | Location | DPA status | Added | Status |
|---|---|---|---|---|---|---|
| Modern Treasury | Payment origination, treasury ledgering, funding, disbursement, reconciliation, and returns for payroll | Bank account/routing details, counterparty identity, payroll payment metadata, ledger records | United States | Standard DPA available; execution to be confirmed by counsel | 2026-07-05 | Active — sandbox-first until live-money approval |
| Plaid | Bank-account verification and processor tokens for direct deposit / employer funding | Bank account credentials, account/routing details, processor tokens | United States | Standard DPA available; execution to be confirmed by counsel | 2026-07-05 | Active |
| Amazon Web Services (SES) | Outbound transactional email delivery | Recipient email address, message content (notifications, notices, workflow email) | United States | AWS DPA / GDPR addendum; execution to be confirmed by counsel | 2026-07-05 | Active |
| Twilio | Outbound SMS notifications | Recipient phone number, message content | United States | Standard DPA available; execution to be confirmed by counsel | 2026-07-05 | Active |
| Benmore (platform hosting) | Application runtime, database hosting, and storage; runs on Amazon Web Services infrastructure | All application data at rest and in transit (HR, payroll, tax, benefits, treasury, audit records) | United States | Platform hosting agreement; subprocesses to AWS under AWS DPA | 2026-07-05 | Active |
| Google Fonts | Web-font delivery for public pages (fonts.googleapis.com) | End-user browser IP address and request metadata (no HRIS record data) | Global CDN | Google terms; low-sensitivity (fonts only) | 2026-07-05 | Active |
| Toast | POS / labor-data synchronization when your workspace connects the integration | Employee identity, shift/labor, and sales/tip data required for the sync | United States | Provider DPA to be confirmed by counsel | 2026-07-05 | Conditional — enabled per tenant |
| QuickBooks (Intuit) | Accounting / general-ledger synchronization when your workspace connects the integration | Payroll totals, employee identity, and GL metadata required for the sync | United States | Provider DPA to be confirmed by counsel | 2026-07-05 | Conditional — enabled per tenant |
| Checkr | Background-check workflows when your workspace connects the integration | Candidate/employee identity, SSN, and background-check inputs/results | United States | Provider DPA to be confirmed by counsel | 2026-07-05 | Conditional — enabled per tenant |
Changes to this list
This register is maintained and versioned. When we intend to add or replace a subprocessor that processes customer personal data, we will provide advance notice and an objection window as provided in your agreement (DPA/MSA). At launch this notification is a manual process: we bump the register version, record the change in our changelog, and notify affected customers through their account or support contact. Where your agreement specifies particular notice periods or objection rights, those terms govern.
Related
Privacy Policy · Terms · Data Requests · Docs