Openwake · evidence pack

Carta

https://carta.com · record 682 · read 2026-10-20 · rules/v1 · generated 2026-10-23 04:17 UTC

Facts

Trains on customer data
unclear
No supporting text found in the documents read.
privacy policy · https://carta.com/privacy/ · confidence 0.20
Opt-out mechanism
These communications are administrative and you may not opt out of them.
“These communications are administrative and you may not opt out of them.”
privacy policy · https://carta.com/privacy/ · confidence 0.50
AI features
none stated
No supporting text found in the documents read.
privacy policy · https://carta.com/privacy/ · confidence 0.20
Model providers named
Anthropic, Fireworks AI, OpenAI
“Anthropic, PBC AI inference and data analysis USA”
subprocessors · https://carta.com/legal/sub-processors · confidence 0.60
Retention
2190 days
“Retention: for Carta Services, as described in Section 5; for Carta Law Services, six (6) years.”
privacy policy · https://carta.com/privacy/ · confidence 0.50
Hosting regions
United States
“Personal information that we collect from you may be transferred to, stored in, and processed in the United States and other jurisdictions in which Carta or its service providers maintain operations.”
privacy policy · https://carta.com/privacy/ · confidence 0.50
Subprocessor notice
not stated
No supporting text found in the documents read.
privacy policy · https://carta.com/privacy/ · confidence 0.20

Subprocessors (31)

NameCategoryLocationQuoted from
Amazon Web ServiceshyperscalerUSA
“Amazon Web Services Datacenter colocation services USA”
AmplitudeotherUSA
“Amplitude User data analytics USA”
Anthropicmodel providerUSA
“Anthropic, PBC AI inference and data analysis USA”
BoxotherUSA
“Box File transfer USA”
ZoomInfootherUSA
“Chorus by ZoomInfo Customer support communication USA”
CloudflareotherUSA
“Cloudflare Antivirus USA”
Fireworks AImodel providerUSA
“Fireworks.ai, Inc. AI Model Inference and Fine Tuning USA, Japan, Singapore, Australia, Germany, UK, Sweden, Netherlands, France, Switzerland and Australia”
FivetranotherUSA
“Fivetran Pipeline data processing provider USA”
FrontotherUSA
“Front Customer support communication USA”
Google Cloudhyperscalerunstated
“Google Cloud Platform Data analysis and cloud infrastructure”
IterableotherUSA
“Iterable Client and marketing email automation USA”
LookerotherUSA
“Looker Business intelligence USA”
MarketootherUSA
“Marketo Marketing USA”
OpenAImodel providerUSA
“OpenAI Service Provider for AI Functions USA”
PendootherUSA
“Pendo User data analytics USA”
PlaidotherUSA
“Plaid Inc. Bank integration USA”
SalesforceotherUSA
“Salesforce Client relationship management USA”
SlackotherUSA
“Slack Communication and collaboration USA”
SnowflakeotherUSA
“Snowflake Data warehouse USA”
StripeotherUSA
“Stripe Money movement and account verification USA”
Atlassianotherunstated
“Atlassian Provides a cloud-based bug tracking system, where we may process end user data to the extent necessary to reproduce and fix bugs, and in general as necessary to deliver and improve the Carta”
Datadogotherunstated
“Datadog Infrastructure and error monitoring service for cloud-based applications.”
DocuSignotherUSA
“DocuSign Electronic signing of documents. USA”
FullStoryotherunstated
“FullStory Product analytics platform used when developing new features and services. It stores user contact details, product usage recordings and product usage analytics.”
Intercomotherunstated
“Intercom User support and engagement platform used to display content in the product. It stores user contact details and product interaction data.”
Notionotherunstated
“Notion Provides a cloud-based internal collaboration system, much like an intranet, where we may reference customer data as necessary to deliver and improve the Carta Europe services.”
Herokuotherunstated
“Provides us with a cloud application platform (Heroku) for running the Application and leveraging platform extensions for error analysis, mail sending, and more.”
Sentryotherunstated
“Sentry Cloud-based application and error monitoring platform.”
Typeformotherunstated
“Typeform, S.L. Online form building tool for collecting user feedback in online surveys. It stores user identifications and anonymised user feedback.”
Twiliootherunstated
“Twilio Platform for text messages used for 2FA and for transactional emails (via the Twilio company SendGrid).”
SendGridotherunstated
“Platform for text messages used for 2FA and for transactional emails (via the Twilio company SendGrid).”

Sources read

DocumentURLReadContent hashLedger
privacy_policyhttps://carta.com/privacy/2026-09-05271e39680c9e7689…seq 131
dpahttps://trust.carta.com/legal/dpa2026-10-158bcb5b25c1d238c5…seq 55462
subprocessorshttps://carta.com/legal/sub-processors2026-10-20e058520740030c31…seq 61338
Ledger proof for this record.
seq 61352 · key 2f898a895f05b7a0 · 2026-10-20T05:26:55.503Z
hash accf8da76b0b85a76372c8c00b5a04bd38fff99a1da9334f6311e7011a99e950
prev 2a9cc605d71fbb334d6d9324e646350ed0a359c080db848c5f0499d65db74d38
payload 351814735e4dbd8891c814517205ea29105926a7e3e88784238e90350bda3caf
signature Wf9D+il4YKH275zbD1VUVJelZy1ah280CcoT6Zl9y65OigkJWwx74IjeBTCMG0ENr9pq3BlLOR3NXJ/6dAJnAg==
anchored 2026-10-20 at head seq 61385 90198bd6475ff15c3c045ae583b71db10ee5886294226a625dc412e74fd1ffd3
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.