Openwake · evidence pack

Carta

https://carta.com · record 199 · read 2026-09-05 · rules/v1 · generated 2026-09-06 04:06 UTC

Facts

Trains on customer data
unclear
No supporting text found in the documents read.
privacy policy · https://carta.com/privacy/ · confidence 0.20
Opt-out mechanism
These communications are administrative and you may not opt out of them.
“These communications are administrative and you may not opt out of them.”
privacy policy · https://carta.com/privacy/ · confidence 0.50
AI features
none stated
No supporting text found in the documents read.
privacy policy · https://carta.com/privacy/ · confidence 0.20
Model providers named
Anthropic, OpenAI
“Anthropic, PBC AI inference and data analysis USA”
subprocessors · https://carta.com/legal/sub-processors · confidence 0.60
Retention
2190 days
“Retention: for Carta Services, as described in Section 5; for Carta Law Services, six (6) years.”
privacy policy · https://carta.com/privacy/ · confidence 0.50
Hosting regions
United States
“Personal information that we collect from you may be transferred to, stored in, and processed in the United States and other jurisdictions in which Carta or its service providers maintain operations.”
privacy policy · https://carta.com/privacy/ · confidence 0.50
Subprocessor notice
not stated
No supporting text found in the documents read.
privacy policy · https://carta.com/privacy/ · confidence 0.20

Subprocessors (31)

NameCategoryLocationQuoted from
Amazon Web ServiceshyperscalerUSA
“Amazon Web Services Datacenter colocation services USA”
AmplitudeotherUSA
“Amplitude User data analytics USA”
Anthropicmodel providerUSA
“Anthropic, PBC AI inference and data analysis USA”
BoxotherUSA
“Box File transfer USA”
ZoomInfootherUSA
“Chorus by ZoomInfo Customer support communication USA”
CloudflareotherUSA
“Cloudflare Antivirus USA”
FivetranotherUSA
“Fivetran Pipeline data processing provider USA”
FrontotherUSA
“Front Customer support communication USA”
Google Cloudhyperscalerunstated
“Google Cloud Platform Data analysis and cloud infrastructure”
IterableotherUSA
“Iterable Client and marketing email automation USA”
LookerotherUSA
“Looker Business intelligence USA”
MailchimpotherUSA
“Mailchimp Client and marketing email automation USA”
MarketootherUSA
“Marketo Marketing USA”
OpenAImodel providerUSA
“OpenAI Service Provider for AI Functions USA”
PendootherUSA
“Pendo User data analytics USA”
PlaidotherUSA
“Plaid Inc. Bank integration USA”
SalesforceotherUSA
“Salesforce Client relationship management USA”
SlackotherUSA
“Slack Communication and collaboration USA”
SnowflakeotherUSA
“Snowflake Data warehouse USA”
StripeotherUSA
“Stripe Money movement and account verification USA”
Atlassianotherunstated
“Atlassian Provides a cloud-based bug tracking system, where we may process end user data to the extent necessary to reproduce and fix bugs, and in general as necessary to deliver and improve the Carta”
Datadogotherunstated
“Datadog Infrastructure and error monitoring service for cloud-based applications.”
DocuSignotherUSA
“DocuSign Electronic signing of documents. USA”
FullStoryotherunstated
“FullStory Product analytics platform used when developing new features and services. It stores user contact details, product usage recordings and product usage analytics.”
Intercomotherunstated
“Intercom User support and engagement platform used to display content in the product. It stores user contact details and product interaction data.”
Notionotherunstated
“Notion Provides a cloud-based internal collaboration system, much like an intranet, where we may reference customer data as necessary to deliver and improve the Carta Europe services.”
Herokuotherunstated
“Provides us with a cloud application platform (Heroku) for running the Application and leveraging platform extensions for error analysis, mail sending, and more.”
Sentryotherunstated
“Sentry Cloud-based application and error monitoring platform.”
Typeformotherunstated
“Typeform, S.L. Online form building tool for collecting user feedback in online surveys. It stores user identifications and anonymised user feedback.”
Twiliootherunstated
“Twilio Platform for text messages used for 2FA and for transactional emails (via the Twilio company SendGrid).”
SendGridotherunstated
“Platform for text messages used for 2FA and for transactional emails (via the Twilio company SendGrid).”

Sources read

DocumentURLReadContent hashLedger
privacy_policyhttps://carta.com/privacy/2026-09-05271e39680c9e7689…seq 131
subprocessorshttps://carta.com/legal/sub-processors2026-09-058e04fd9b14aafd42…seq 192
dpahttps://trust.carta.com/legal/dpa2026-09-0592b0ea745e42d467…seq 193
Ledger proof for this record.
seq 406 · key 2f898a895f05b7a0 · 2026-09-06T01:39:47.422Z
hash dc4e45daa7d2520f6fa104538da5d88b88bf56d8c76397bbd726432a6a99ae1f
prev e42cd227ccd005438db53e840f70afffafefb1bf8d74ac36e9c374ebde20261a
payload 3559b0f576c14ee28f3554fc9211c42177dac2f54cd2a3931f8d9e7061eb69eb
signature R7eVR8KTEjQdY3mm55SB08jXBynU3djCGYncngO7A4yAomxQBPtCAjL9Ho124DvcNwsJwb5R5+x/rBM8GfdFAg==
anchored 2026-09-06 at head seq 564 231a9dea0f93915bd7110e6786e00908325db3031635ace53c1023f850e0c49c
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.