Bonfire
Procurement and sourcing software for public sector agencies running bids and RFPs.
Subprocessors (48)
Checked Oct 27, 2026 · source disclosure ↗
| vendor | purpose | evidence |
|---|---|---|
| Amazon Web Services United States, Canada | Cloud infrastructure provider offering compute (EC2), container orchestration (EKS), relational and document... Sub-Processors — Application Hosting Environment | “Amazon Web Services (AWS)” |
| Google Cloud Platform United States, Canada | Cloud infrastructure services including compute, storage, identity management, and application hosting Sub-Processors — Application Hosting Environment | “Google Cloud Platform (GCP)” |
| Microsoft Azure United States, Canada | Cloud infrastructure and platform services including compute, storage, identity management, application hosting,... Sub-Processors — Application Hosting Environment | “Microsoft Azure” |
| Adobe Acrobat Sign United States | Electronic signature and document management platform Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Adobe Sign” |
| Anthropic United States | Foundation large language model (LLM) provider powering AI features via AWS Bedrock and the LiteLLM gateway Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Anthropic (Claude)” |
| Arize AI United States | AI observability and prompt-management platform providing performance monitoring and centralized prompt-template... Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Arize” |
| Blackbaud United States, Canada | Fundraising and nonprofit management software with financial data integration capabilities Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Blackbaud” |
| BoldSign United States, Canada | Electronic signature platform for document signing and agreement management Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “BoldSign” |
| ChartMogul European Union | Subscription management and analytics platform Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “ChartMogul” |
| Deltek United States | Project and business management software; receives bid and solicitation data for integration and distribution purposes Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Deltek” |
| DocuSign United States, Canada | Electronic signature and digital agreement management platform Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “DocuSign” |
| Fullstory United States | Digital experience analytics platform providing session recording and user interaction analysis Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “FullStory” |
| LiteLLM United States | Centralized AI gateway routing all LLM requests to the underlying model provider (Anthropic, OpenAI, or Gemini);... Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “LiteLLM” |
| Mode Analytics United States | Business intelligence and data analytics platform for custom reporting and dataset generation Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Mode Analytics (Mode.com)” |
| OpenAI United States | Foundation large language model (LLM) provider powering AI features via OpenRouter. No training on customer data Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “OpenAI” |
| OpenRouter United States | LLM gateway and router; includes optional Perplexity web-data enrichment for funder research Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “OpenRouter” |
| Pendo United States | Product analytics and user engagement platform providing in-application guidance and usage analytics Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Pendo” |
| JAGGAER, LLC United States | Procurement and supply chain management platform enabling bid data exchange and supplier connectivity Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “SciQuest / Jaggaer” |
| Surety2000 United States | Surety bond management and validation platform providing bid bond verification services via API Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Surety2000 (S2K)” |
| Svix United States | Webhook management service enabling event-driven integrations and notifications Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Svix” |
| TypeSafe United States | Large language model (LLM) optimaized for scoring the accuracy of text Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Typesafe AI” |
| WizeHive United States | Grant, award, and application management platform Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “WizeHive” |
| Workato United States | Integration platform as a service (iPaaS) enabling automated workflows and system integrations Sub-Processors with Access to Customer Platform Data Including Personal Information Input by Customers | “Workato” |
| Auth0 United States | Identity-as-a-service platform providing customer authentication, single sign-on, and session management Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Auth0” |
| BeyondTrust United States, Canada | Privileged access management and remote access security platform Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “BeyondTrust” |
| Braintree United States | Payment processing Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “BrainTree” |
| CardConnect United States | Payment card processing gateway Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “CardConnect” |
| Chase Paymentech United States | Payment card and check transaction processing service Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Chase Paymentech” |
| Cloudflare United States, Canada | Content delivery network, web application firewall, DDoS protection, DNS management, and edge computing services Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Cloudflare” |
| Coralogix United States | Log management, observability, and synthetic monitoring platform for application and infrastructure telemetry Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Coralogix / Checkerly” |
| CrowdStrike United States | Endpoint detection and response (EDR) and cloud security platform providing threat detection, threat hunting, and... Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “CrowdStrike” |
| Datacap Systems United States | Payment card processing gateway Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Datacap Systems” |
| Fiserv United States | Payment card and transaction processing service Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “FiServ (First Data)” |
| Fivetran United States, Canada | Supports movement of payment records from Stripe to application subscription management databases Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Fivetran” |
| Have I Been Pwned United States | Password breach checking service using anonymized credential hash verification Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “HaveIBeenPwned” |
| Invoice Cloud United States | Electronic invoice presentment and payment processing platform Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Invoice Cloud” |
| Mailchimp United States | Transactional email delivery service Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “MailChimp” |
| Mapbox United States | Mapping and geolocation data delivery service Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “MapBox” |
| miniOrange United States | Identity provider and SSO integration service Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “MiniOrange” |
| Okta United States, Canada | Identity and access management platform providing authentication, single sign-on, and user lifecycle management Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Okta” |
| Ory United States | Identity and session management platform providing authentication and authorization services Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Ory” |
| Paymentus United States | Payment processing and customer engagement platform Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Paymentus Corporation” |
| Postmark United States | Transactional email delivery service Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Postmark (mtasv.net)” |
| Stripe United States | Payment processing Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Stripe” |
| Sumo Logic United States, Canada | Cloud-based log management, security information and event management (SIEM), and observability platform Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “SumoLogic” |
| Worldpay United States | Payment card processing service Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Vantiv / Worldpay” |
| Wiz United States, Canada | Cloud security posture management (CSPM) platform providing misconfiguration detection and risk visibility across... Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “Wiz” |
| WorkOS United States | SSO processing Sub-Processors that Provide Supporting Services (May Have Access to Personal Information Such as Business Contract Information) | “WorkOS” |
- Amazon Web ServicesUnited States, Canada
Cloud infrastructure provider offering compute (EC2), container orchestration (EKS), relational and document...
“Amazon Web Services (AWS)”
- Google Cloud PlatformUnited States, Canada
Cloud infrastructure services including compute, storage, identity management, and application hosting
“Google Cloud Platform (GCP)”
- Microsoft AzureUnited States, Canada
Cloud infrastructure and platform services including compute, storage, identity management, application hosting,...
“Microsoft Azure”
- Adobe Acrobat SignUnited States
Electronic signature and document management platform
“Adobe Sign”
- AnthropicUnited States
Foundation large language model (LLM) provider powering AI features via AWS Bedrock and the LiteLLM gateway
“Anthropic (Claude)”
- Arize AIUnited States
AI observability and prompt-management platform providing performance monitoring and centralized prompt-template...
“Arize”
- BlackbaudUnited States, Canada
Fundraising and nonprofit management software with financial data integration capabilities
“Blackbaud”
- BoldSignUnited States, Canada
Electronic signature platform for document signing and agreement management
“BoldSign”
- ChartMogulEuropean Union
Subscription management and analytics platform
“ChartMogul”
- DeltekUnited States
Project and business management software; receives bid and solicitation data for integration and distribution purposes
“Deltek”
- DocuSignUnited States, Canada
Electronic signature and digital agreement management platform
“DocuSign”
- FullstoryUnited States
Digital experience analytics platform providing session recording and user interaction analysis
“FullStory”
- LiteLLMUnited States
Centralized AI gateway routing all LLM requests to the underlying model provider (Anthropic, OpenAI, or Gemini);...
“LiteLLM”
- Mode AnalyticsUnited States
Business intelligence and data analytics platform for custom reporting and dataset generation
“Mode Analytics (Mode.com)”
- OpenAIUnited States
Foundation large language model (LLM) provider powering AI features via OpenRouter. No training on customer data
“OpenAI”
- OpenRouterUnited States
LLM gateway and router; includes optional Perplexity web-data enrichment for funder research
“OpenRouter”
- PendoUnited States
Product analytics and user engagement platform providing in-application guidance and usage analytics
“Pendo”
- JAGGAER, LLCUnited States
Procurement and supply chain management platform enabling bid data exchange and supplier connectivity
“SciQuest / Jaggaer”
- Surety2000United States
Surety bond management and validation platform providing bid bond verification services via API
“Surety2000 (S2K)”
- SvixUnited States
Webhook management service enabling event-driven integrations and notifications
“Svix”
- TypeSafeUnited States
Large language model (LLM) optimaized for scoring the accuracy of text
“Typesafe AI”
- WizeHiveUnited States
Grant, award, and application management platform
“WizeHive”
- WorkatoUnited States
Integration platform as a service (iPaaS) enabling automated workflows and system integrations
“Workato”
- Auth0United States
Identity-as-a-service platform providing customer authentication, single sign-on, and session management
“Auth0”
- BeyondTrustUnited States, Canada
Privileged access management and remote access security platform
“BeyondTrust”
- BraintreeUnited States
Payment processing
“BrainTree”
- CardConnectUnited States
Payment card processing gateway
“CardConnect”
- Chase PaymentechUnited States
Payment card and check transaction processing service
“Chase Paymentech”
- CloudflareUnited States, Canada
Content delivery network, web application firewall, DDoS protection, DNS management, and edge computing services
“Cloudflare”
- CoralogixUnited States
Log management, observability, and synthetic monitoring platform for application and infrastructure telemetry
“Coralogix / Checkerly”
- CrowdStrikeUnited States
Endpoint detection and response (EDR) and cloud security platform providing threat detection, threat hunting, and...
“CrowdStrike”
- Datacap SystemsUnited States
Payment card processing gateway
“Datacap Systems”
- FiservUnited States
Payment card and transaction processing service
“FiServ (First Data)”
- FivetranUnited States, Canada
Supports movement of payment records from Stripe to application subscription management databases
“Fivetran”
- Have I Been PwnedUnited States
Password breach checking service using anonymized credential hash verification
“HaveIBeenPwned”
- Invoice CloudUnited States
Electronic invoice presentment and payment processing platform
“Invoice Cloud”
- MailchimpUnited States
Transactional email delivery service
“MailChimp”
- MapboxUnited States
Mapping and geolocation data delivery service
“MapBox”
- miniOrangeUnited States
Identity provider and SSO integration service
“MiniOrange”
- OktaUnited States, Canada
Identity and access management platform providing authentication, single sign-on, and user lifecycle management
“Okta”
- OryUnited States
Identity and session management platform providing authentication and authorization services
“Ory”
- PaymentusUnited States
Payment processing and customer engagement platform
“Paymentus Corporation”
- PostmarkUnited States
Transactional email delivery service
“Postmark (mtasv.net)”
- StripeUnited States
Payment processing
“Stripe”
- Sumo LogicUnited States, Canada
Cloud-based log management, security information and event management (SIEM), and observability platform
“SumoLogic”
- WorldpayUnited States
Payment card processing service
“Vantiv / Worldpay”
- WizUnited States, Canada
Cloud security posture management (CSPM) platform providing misconfiguration detection and risk visibility across...
“Wiz”
- WorkOSUnited States
SSO processing
“WorkOS”