Subprocessors

Last updated: June 11, 2026

This page describes the third-party services (“subprocessors”) that Ledgerwire LLC relies on to deliver the Ledgerwire service. Each subprocessor receives only the specific user data necessary for the function it provides, under a data processing agreement or equivalent contractual protection.

We will update this page in advance of adding any new subprocessor that processes user data. To be notified of changes, contact support@ledgerwire.io.

How your financial data flows

When you connect a financial account to Ledgerwire, your bank credentials and account data flow through the following chain:

You → Ledgerwire → Quiltt → Finicity → Your bank or brokerage

Ledgerwire does not store your bank login credentials. They are entered directly into our regulated open-banking partners’ secure flow and held under their own security and regulatory controls — never seen or stored by Ledgerwire. Ledgerwire stores only the connection tokens required to request your account data on a read-only basis on your behalf, and does not retain your transaction or account data at rest.

Named subprocessors

Quiltt

• Purpose: Primary open-banking data aggregator. Manages bank connections and serves account, transaction, holding, and recurring-charge data to Ledgerwire.
• Data received: Bank-connection tokens, account identifiers, and transaction queries scoped to your authorized accounts.
• Location: United States
• Privacy policy: https://quiltt.io/privacy

Finicity (a Mastercard company)

• Purpose: The underlying open-banking provider that Quiltt uses to connect to US financial institutions. Holds the direct technical relationship with your bank.
• Data received: Bank credentials and account data, routed through Quiltt. Ledgerwire does not contract with Finicity directly.
• Location: United States
• Privacy policy: https://www.finicity.com/privacy/

Stripe

• Purpose: Payment processor for the Ledgerwire subscription.
• Data received: Name, email address, billing address, and payment method details. Ledgerwire never sees or stores your card number.
• Location: United States
• Privacy policy: https://stripe.com/privacy

Plausible Analytics

• Purpose: Aggregate, cookieless web analytics on public marketing pages. No analytics of any kind run on the authenticated dashboard or any page displaying your financial data.
• Data received: Anonymous, aggregated page-view and referrer statistics from public marketing pages only. Plausible uses no cookies and stores no persistent identifiers; it never receives your name, email address, account data, or any financial information.
• Location: European Union
• Privacy policy: https://plausible.io/privacy

Categories of operational subprocessors

In addition to the named subprocessors above, Ledgerwire relies on the following categories of operational service providers. Each is bound by a written agreement and processes only the data necessary for its function. Specific vendors within each category may change over time.

• Hosting and compute provider. Runs the Ledgerwire application and stores the encrypted application database. Located in the United States.
• Object storage provider. Stores encrypted database backups for disaster recovery. Located in the United States.
• Transactional email provider. Delivers magic-link sign-in messages, account notifications, and billing receipts. Located in the United States.
• Application monitoring and logging provider. Receives structured application logs (with personally identifiable information redacted) and metrics, used for diagnosing incidents and monitoring service health. This may be a US or EU provider depending on configuration.

What we do not share

• We do not share user data with advertising networks, marketing platforms, data brokers, or affiliate-marketing partners.
• We do not sell personal information.
• We do not use invasive end-user analytics products such as Google Analytics, Mixpanel, or Amplitude, and we use no advertising pixels. Our public marketing pages use Plausible Analytics, a cookieless, privacy-first analytics service (listed above); no analytics of any kind run on the authenticated dashboard.
• We do not send your data to large language model providers (such as OpenAI or Anthropic). The AI assistants and MCP clients you connect to Ledgerwire operate on your side, not ours, and pull data from Ledgerwire on your behalf when you direct them to.

Previously used subprocessors

Teller

• Status: Deprecated as of Q2 2026. Replaced by Quiltt as the primary data aggregator. Some legacy user accounts may still hold Teller connections until users complete re-enrollment.
• Privacy policy: https://teller.io/about/privacy

Questions

For questions about this page or any of our subprocessors, contact support@ledgerwire.io.