Effective Date: 2026-05-29 · Version 1.0

1. Accounting Software

Intuit QuickBooks Online (USA), purpose: cloud bookkeeping platform. Xero Limited (NZ / USA), purpose: alternative cloud bookkeeping. Sage Intacct (USA), purpose: mid-market accounting. Oracle NetSuite (USA), purpose: enterprise ERP.

2. Payroll

Gusto, Inc. (USA), purpose: payroll and benefits administration. ADP, LLC (USA), purpose: enterprise payroll. Rippling People Center, Inc. (USA), purpose: integrated HR + payroll.

3. Bill Payment & Accounts Payable

BILL.com Holdings, Inc. (USA), purpose: AP automation and vendor payments. Ramp Business Corporation (USA), purpose: spend management.

4. Email & Document Handling

Google LLC (Workspace) (USA), purpose: business email and document storage. Box, Inc. (USA), purpose: encrypted client file exchange.

5. Infrastructure & Security

Amazon Web Services, Inc. (USA), purpose: cloud hosting and storage. Cloudflare, Inc. (USA), purpose: DNS, CDN, WAF. Okta, Inc. (USA), purpose: identity and SSO. 1Password (Canada / USA), purpose: secrets management.

6. Analytics

Google Analytics (USA), purpose: anonymized aggregate website analytics, only loaded if you accept analytics cookies.

7. Updates

We notify clients in advance of any new or replacement subprocessor with material access to their data, allowing a reasonable objection window per the Data Processing Agreement.

Questions? Contact info@troyaccounting.net or browse all our legal & compliance documents.