Does your organization use Carta? One sensor, and Openwake watches it on its own: the documents re-read daily, every moved clause told.Start free
Carta did not let our reader in: privacy policy (HTTP 403). Facts below come only from what was readable; anything marked "not stated" may simply be behind that block. We retry daily and rebuild the record the moment the documents open. Work for Carta? Claim the profile and send us the text.
Trains on customer data
Training posture: unknown · the documents do not say
silence is not a no
Not stated in the documents we could read. An absence here is an unknown, not a no.
Opt-out mechanism
These communications are administrative and you may not opt out of them.
“These communications are administrative and you may not opt out of them.”
AI features
none stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Model providers named
Anthropic, Fireworks AI, OpenAI
“Anthropic, PBC AI inference and data analysis USA”
Retention
2190 days
“Retention: for Carta Services, as described in Section 5; for Carta Law Services, six (6) years.”
Hosting regions
United States
“Personal information that we collect from you may be transferred to, stored in, and processed in the United States and other jurisdictions in which Carta or its service providers maintain operations.”
Subprocessor notice
not stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Downstream
Who's behind Carta, as listed in its own subprocessor documents. 31 subprocessors.
Model providers
- AnthropicUSA
- Fireworks AIUSA
- OpenAIUSA
Hyperscalers
- Amazon Web ServicesUSA
- Google Cloudunstated
Other subprocessors
- AmplitudeUSA
- Atlassianunstated
- BoxUSA
- CloudflareUSA
- Datadogunstated
- DocuSignUSA
- FivetranUSA
- FrontUSA
- FullStoryunstated
- Herokuunstated
- Intercomunstated
- IterableUSA
- LookerUSA
- MarketoUSA
- Notionunstated
- PendoUSA
- PlaidUSA
- SalesforceUSA
- SendGridunstated
- Sentryunstated
- SlackUSA
- SnowflakeUSA
- StripeUSA
- Twiliounstated
- Typeformunstated
- ZoomInfoUSA
Reviewer notes
Extracted by deterministic rules (rules/v1), no language model. Coverage is limited to recognisable clauses and a gazetteer of common subprocessors; absent values mean 'not matched', not 'not present'. no training clause matched
Documents read
- privacy policy https://carta.com/privacy/HTTP 403 · 2026-10-22
- subprocessors https://carta.com/legal/sub-processorsHTTP 200 · 2026-10-20
- dpa https://trust.carta.com/legal/dpaHTTP 200 · 2026-10-15
Document changes
- high 2026-10-20 · subprocessors +4 / −2 lines
show diff
+ LAST UPDATED: OCTOBER 19, 2026+ Fireworks.ai, Inc.+ AI Model Inference and Fine Tuning+ USA, Japan, Singapore, Australia, Germany, UK, Sweden, Netherlands, France, Switzerland and Australia− LAST UPDATED: MARCH 9, 2026− DigitalBrain - low 2026-10-15 · dpa +0 / −1 lines
show diff
− SOC 1 Type II - low 2026-10-13 · dpa +0 / −16 lines
show diff
− 6 Compliance− 2025 SOC 2 TYPE 2 REPORT FOR CARTA PLATFORM− View all documents →− KNOWLEDGE BASE FAQS169− Access Management− Application and Data Security− Cloud Security− Continuity and Disaster Recovery− Device Management− Incident Management− Personnel Security− Physical Security− Risk and Vulnerability Management− Secure Development− Security Governance - low 2026-10-02 · dpa +3 / −0 lines
show diff
+ FEATURED DOCUMENTS+ 2025 SOC 2 TYPE 2 REPORT FOR CARTA PLATFORM+ View all documents → - medium 2026-09-10 · dpa +1 / −26 lines
show diff
+ https://carta.com− 23 Documents− FEATURED DOCUMENTS− CARTA'S PASSWORD POLICY− CARTA SIG CORE 2026− CARTA ISO 27001 CERTIFICATION− CARTA ISO 27001 - SOA V1.0 - MARCH 2025− BRIDGE LETTER FOR CARTA'S 2025 SOC 2 REPORTS− AVANTIA (NOW CARTA LAW) ISO 27001 CERTIFICATION− 2025 SOC 2 TYPE 2 REPORT FOR CAPDESK− 2025 SOC 2 TYPE 2 FOR LISTALPHA (NOW CRM)− 2025 SOC 2 TYPE 2 - AVANTIA LAW (NOW CARTA LAW)− 2025 PEN TEST - COMPANION LETTER− USE OF AI AT CARTA− ACCELEX (NOW LPPA) ISO 27001 CERTIFICATION− 2025 SOC 2 TYPE 2 FOR SIRVATUS (NOW LOAN OPS) - low 2026-09-09 · dpa +1 / −4 lines
show diff
+ 23 Documents− 28 Documents− CARTA'S BUSINESS CONTINUITY PLAN (EXTERNAL)− CARTA ISO 27001 CERTIFICATE 2025-2028− 2025 SOC 1 TYPE 1 REPORT FOR MONEY MOVEMENT - low 2026-09-08 · dpa +1 / −0 lines
show diff
+ Device Management
Fact changes
- high 2026-10-20 · 0 field change(s), +1/−1 subprocessors, +1 model providers
Corrections
No correction requests. Anyone may dispute a fact with a source; requests and resolutions are public and ledger-entered.
Facts are as stated in Carta's public documents on the date read. This is a record, not legal advice. Work for Carta? Claim this profile · Something wrong? Request a correction.