Last updated October 15, 2026
Running Candor means other companies handle some of the work: sending email, storing files, processing payments. Some of them touch data you or the people answering your surveys have given us. This page names every one of them, what each one does, and who sits underneath them.
We publish it because you shouldn’t have to ask. If your organization needs this for a vendor review, a data protection assessment, or an ethics submission, it’s here, and you can link straight to it.
| Company | What it does for Candor | Privacy notice |
|---|---|---|
| Amazon Web Services | Sends the email Candor sends you, stores files and exports, and holds encryption keys | aws.amazon.com/privacy |
| Anthropic | Powers Candor’s optional AI help with writing and interpreting surveys. Off unless you turn it on What each AI feature sends | anthropic.com/legal/privacy |
| Better Stack | Watches whether Candor is up, and receives application logs and diagnostic traces | betterstack.com/privacy |
| Cloudflare | Delivers the site quickly, filters automated traffic before it reaches Candor, and runs the spam check on surveys | cloudflare.com/privacypolicy |
| Fastmail Pty Ltd | Handles our company mailboxes, including support@usecandor.app, where you write to us and we write back. Separate from the automated email Candor sends from the app itself | fastmail.com/policies/privacy |
| FastSpring | Processes payments and subscriptions as our Merchant of Record. Card details go to FastSpring, never to Candor | fastspring.com/privacy |
| GoHighLevel | Hosts our blog and holds contact records for people who get in touch | gohighlevel.com/privacy-policy |
| Google Analytics | Measures traffic on our marketing pages. Not used inside Candor itself | policies.google.com/privacy |
| Render Services, Inc. | Runs the Candor application and the database that holds your surveys and responses | render.com/privacy |
| Sentry | Records errors so we can find and fix what breaks | sentry.io/privacy |
| Termly | Manages the cookie consent choice you make on our site | termly.io/privacy-policy |
Render runs on infrastructure it doesn’t own either. Most companies stop the list at their own vendors; we’d rather show you the whole chain, because “we’re hosted on Render” isn’t a complete answer to where your data lives.
| Company | What it does for Render |
|---|---|
| Amazon Web Services | Hosting and cloud infrastructure |
| ClickHouse, Inc. | Hosting and cloud infrastructure |
| Cloudflare | Hosting and cloud infrastructure |
| Google Cloud Platform | Hosting and cloud infrastructure |
Render publishes and maintains this list at render.com/trust. We’re subscribed to its change notifications, and Render is contractually required to stay responsible for how these companies handle data.
An IP address is the internet address a connection comes from. This section is about people who answer a survey and people who visit our website.
Candor does not record the IP address of a person who answers a survey. Cloudflare receives it. Every connection to usecandor.app passes through Cloudflare first, and a survey’s spam check runs in the person’s browser against Cloudflare.
Candor keeps the result of the spam check and nothing else from it. What Cloudflare keeps is under its own terms, for a period Candor does not set. Its privacy notice is linked in the table above. A survey’s creator can turn the spam check off.
A consent page records the text the person was shown, whether they checked the box, and when. It records nothing about their connection or device.
A person who only visits our website connects to Cloudflare in the same way. If they accept analytics cookies on our marketing pages, Google Analytics also receives their connection.
Candor does not use an IP address to work out where a person is.
Candor’s application and database run in the United States, in Render’s Virginia region. Amazon Web Services processing takes place in the United States as well. Every company named above processes data in the United States.
Render’s platform holds ISO 27001 certification and an unqualified SOC 2 Type II opinion covering security, confidentiality, and availability, independently examined by BARR Advisory, and it undergoes annual penetration testing. Render’s SOC 3 report and GDPR Data Processing Addendum are available on request; its SOC 2 Type II report, ISO 27001 certificate, and penetration test report are available directly from Render under NDA.
To be clear about what that covers: these certifications belong to Candor’s infrastructure provider. Candor does not currently hold its own SOC 2 or ISO 27001 certification.
We update this page when a company is added or removed, and the date at the top changes with it. If a change to this list would be a problem for your organization, tell us. That’s a conversation worth having before it becomes an issue.
Email: support@usecandor.app
We read every message and respond within one business day.