Vendor profile
Expensify: where is customer data stored and processed?
Expensify stores European users' data on servers in the USA, partly without a stated location. Customer group is not stated in the source material, so it cannot be determined whether this is a consumer or business product. Storage and processing run through colocation at Evocative and Switch, both in the USA; AWS holds receipt images and encrypted long-term storage, also in the USA. Real-time backup runs between three data centres, but their location is not stated. Identity, support, push notifications, email/SMS services (Mailgun and Twilio) and several analytics sub-processors are listed, but no location is given for most of them; Cloudflare, Airship, Fabric and FullStory are listed as USA.
Checked 19 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | – | USA |
|---|
Only outside the EU/EEA, with no European alternative stated: Storage.
Ownership and agreements
| Headquarters | USA |
|---|
| Data processing agreement | Not found on the vendor's website |
|---|
| Certifications | None found |
|---|
Sub-processors (45)
| Name | Country | Purpose |
|---|
| Evocative | USA | Datasenter, kolokasjon for lagring og prosessering |
| Switch | USA | Datasenter, kolokasjon for lagring og prosessering |
| Airship | USA | Push-varsler |
| Amazon Web Services (AWS) | USA | Kvitteringsbilder og kryptert langtidslagring |
| Bancorp | USA | ACH-betalinger |
| Checkbook.io | USA | Sjekkbetalinger |
| Cloudflare | USA | Infrastruktur |
| CloudTask | – | Support/managed workforce |
| Collective Solution | – | Transkribering av kvitteringer |
| CommonRoom | USA | Buyer intelligence |
| CorPay | USA | Refusjon og betalinger |
| Fabric | USA | Overvåking av appytelse |
| FullFunnel | – | Managed workforce |
| FullStory | USA | Brukeropplevelsesanalyse |
| GIACT | USA | Risikostyring |
Sources