37signals

Company Processors

Last updated: October 12, 2026

We as a company use third-party software that may process your information under certain circumstances.

For the following processors, we have established GDPR-compliant data processing agreements, extending GDPR safeguards everywhere personal data is processed. The country shown for each one is where the company we contract with is located:

  • Cloudflare Pages: Blog hosting (United States)
  • Mailchimp: Email newsletter service (United States)
  • PayPal: Payment transfer service (United States)
  • Plausible: Website analytics (Estonia)
  • PostHog: A/B testing on the Basecamp website (United States)
  • Shopify: E-commerce platform (United States)
  • Squarespace: Blog hosting (United States)
  • Typeform: Form/survey provider (Spain)

ONCE products run on your own server, so what you put in them never reaches us. When you buy a ONCE product or contact us about one, these processors handle your purchase and support records:

  • Help Scout: Help desk software (United States)
  • Stripe: Payment processing services (United States)

As a company, we also produce a podcast, host a blog, and run occasional events virtually. If you voluntarily engage with us through those media, your personal information may also be collected by the following processors:

  • Crowdcast: Livestreaming platform (United States)
  • Buzzsprout: Podcast publishing platform (United States)
  • SquadCast: Podcast recording software (United States)