Subprocessors
Last updated Oct 7, 2026
We use the providers below to process data on our behalf when the matching feature is turned on. Not every provider is turned on for every organization, and a listing here doesn’t by itself mean a contract with that provider is in place. Your organization’s signed agreement and data-processing addendum say which are in use. We do not sell personal information, and we never share minors’ information for advertising. When a deployed subprocessor changes, we update this page.
| Provider | Purpose | Data processed | Primary region |
|---|---|---|---|
| Stripe, Inc. | Card payments and payouts to organizations | Cardholder data (tokenized by Stripe), payer name/email, and connected-organization onboarding/payout details when enabled | United States |
| Lob | Optional approved vendor check printing and postal mailing | Approved payee name, postal address, check amount, memo, organization sender address, and provider bank-account reference; Lob manages check signature and bank verification | Named in your organization's agreement |
| Modern Treasury | Optional approved vendor ACH payments and individual reimbursements | Verified organization and recipient bank-account references, approved payee, amount, memo, scheduled release, and payment status; bank details and verification are handled with the provider | Named in your organization's agreement |
| Plaid | Optional organization bank connections and transaction feeds for reconciliation | Bank authorization and connection records, account metadata, and transaction dates, descriptions, amounts and status; Scrimmages sends a coded finance-user identifier | Named in your organization's agreement |
| Configured transactional-email provider | Transactional email (receipts, reminders, password resets) | Recipient name/email, message content | Named in your organization's agreement |
| Twilio Inc. | SMS notifications (opt-in) | Mobile numbers, message content, delivery status | United States |
| Expo (650 Industries, Inc.) | Mobile push notifications | Device push tokens, notification content | United States |
| Cloudflare, Inc. | File/media storage (R2), CDN, and custom-domain TLS | Uploaded files (logos, game video, documents), request metadata | Global edge / US |
| Configured streaming provider | Live and on-demand game video | Game video streams/recordings, viewer counts | Named in your organization's agreement |
| Anthropic, PBC | AI-assisted practice-plan drafting and board-meeting summaries (Claude) | AI-estimated, team-level game context (such as field tilt and time in the final third) that has passed our analytics release checks, plus the team name and sport; never raw video or any player's identity. Board-meeting title, time, place, agenda, minutes, decisions, and action items when staff request a summary | United States |
| Modal Labs, Inc. | Computer-vision processing of game video | Video frames and derived stats | United States |
| Checkr, Inc. | Background checks for volunteers/officials | Applicant name, email, and work location, plus screening results. Social Security number and date of birth are entered directly with Checkr, not Scrimmages | United States |
| Printful, Inc. | Print-on-demand fulfillment of team gear | Order contents, buyer name + shipping address | United States / EU |
| Mapbox, Inc. | Geocoding venue/official addresses to coordinates | Addresses submitted for lookup | United States |
| Google LLC (Google Maps Platform) | Optional registration street-address search | User-entered address search text, random search-session token, optional country filter and selected place identifier; no child or account identifiers | Provider processing locations under the reviewed Maps agreement |
| PostHog, Inc. | Product/usage analytics (server-side) | Pseudonymous organization/team handles and coarse usage properties; no names, emails, minor content, or cookies | United States / EU |
| Functional Software, Inc. (Sentry) | Error monitoring | Exception data and stack traces; default request PII collection is disabled | United States |
| Hosting provider (primary cloud host) | Application servers and database | All application data | United States |
Some providers are used only when an organization turns on that feature (for example SMS, live video, or background checks), and an organization’s data goes to a provider only while that feature is in use. Email privacy@scrimmages.app to ask which provider applies to your organization.
Integrations your organization connects
An organization can connect these services with its own account. Scrimmages sends them data only after the organization connects its account, and only for the actions described.
| Service | Purpose | Data sent |
|---|---|---|
| QuickBooks (Intuit Inc.) | Posting the organization's ledger to its accounting system | Journal entries: date, amounts, account codes, and a Scrimmages reference number |
| Xero Limited | Posting the organization's ledger to its accounting system | Journal entries: date, amounts, account codes, and a Scrimmages reference number |
| Gusto, Inc. | Paying game officials as contractors | The official's Gusto contractor ID, payment date, and amount. Scrimmages reads back the contractor's name and payment status |
| Ayrshare | Publishing the organization's social posts | The post text, link, and image or video link, sent only when the organization publishes a live post |
Questions or DPA requests
Email privacy@scrimmages.app for our data-processing addendum or to ask about a specific subprocessor.