Subprocessors

Portola Technologies, Inc. (“Portola”) engages a limited number of third-party service providers (“subprocessors”) to process Borrower personal information on behalf of our Business Customers. This page lists those subprocessors and the role each plays in delivering our services.

Effective Date
May 14, 2026

Overview

Portola Technologies, Inc. (“Portola”) engages a limited number of third-party service providers (“subprocessors”) to process Borrower personal information on behalf of our Business Customers. This page lists those subprocessors and the role each plays in delivering our services.

All subprocessors listed below are located in the United States and are bound by written agreements that include confidentiality, data-protection, and security requirements appropriate to the data they process. Portola conducts a security review of each subprocessor before engagement and at least annually thereafter, as described in our Third-Party Management Policy.

Current subprocessors

Vendor Purpose Categories of data Location Privacy policy
Amazon Web Services, Inc. Cloud hosting, storage, and transactional email (Amazon SES) for all production systems All categories of Borrower personal information processed by Portola United States aws.amazon.com/privacy
Bridge Network, Inc. (a Stripe company) Fund movement and stablecoin conversion processing Borrower fund-movement and transaction data, including transaction identifiers, amounts, and counterparty references United States stripe.com/privacy
Cloudflare, Inc. Edge security, DDoS protection, and content delivery for the tryportola.com website and API endpoints Web request metadata, IP addresses, and security-event data United States cloudflare.com/privacypolicy
Dropbox Sign Electronic signature of Borrower-facing documents Borrower name, email address, document content, signature, and e-signature audit metadata United States dropbox.com/privacy
Persona Identities, Inc. Identity verification and Know-Your-Customer (KYC) checks Government-issued identification images, selfie images, biographic identifiers, and the results of identity and fraud checks United States withpersona.com/legal/privacy-policy
Plaid Inc. Financial-account aggregation and bank-account verification Borrower financial-account numbers, routing numbers, balances, and transaction history United States plaid.com/legal/#end-user-privacy-policy
Twilio Inc. SMS and voice communications Borrower phone numbers, message and call metadata, and delivery status United States twilio.com/legal/privacy

Notice of new or replacement subprocessors

Portola will provide Business Customers with advance notice before engaging a new subprocessor that processes Borrower personal information, or replacing an existing one, in accordance with our Data Processing Addendum. Business Customers may object to a new subprocessor as set forth in that agreement.

Questions

For questions about this list or our subprocessor management practices, contact us at privacy@tryportola.com.

©Portola Technologies, Inc. All rights reserved.
Get started