Sub-processor List
| Sub-processor | Purpose | Data | Location | Transfer Mechanism | Supplemental Measures | Contact Details | Address |
| Amazon Web Services, Inc. (AWS) | Server infrastructure and data hosting | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Server log data relating to the platform (IP address) Contractual information for the purpose of conducting business (billing contact details) | USA (Americas customers only) | SCCs | AWS takes technical and contractual measures to protect data: Encryption of data in transit and at rest. Encryption key stored in the US. https://d1.awstatic.com/legal/laws-gdpr/AWS_GDPR_DPA.pdf https://aws.amazon.com/blogs/security/aws-and-eu-data-transfers-strengthened-commitments-to-protect-customer-data/https://aws.amazon.com/blogs/security/new-standard-contractual-clauses-now-part-of-the-aws-gdpr-data-processing-addendum-for-customers/ | https://pages.awscloud.com/compliance-contact-us.html | 410 Terry Avenue North, Seattle, WA 98109-5210, USA |
| Amazon Web Services Australia Pty Ltd (AWS) | Server infrastructure and data hosting | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Server log data relating to the platform (IP address) Contractual information for the purpose of conducting business (billing contact details) | Australia (APAC customers only) | SCCs | AWS takes technical and contractual measures to protect data: Encryption of data in transit and at rest. Encryption key stored in Australia. https://d1.awstatic.com/legal/laws-gdpr/AWS_GDPR_DPA.pdf https://aws.amazon.com/blogs/security/aws-and-eu-data-transfers-strengthened-commitments-to-protect-customer-data/https://aws.amazon.com/blogs/security/new-standard-contractual-clauses-now-part-of-the-aws-gdpr-data-processing-addendum-for-customers/ | https://pages.awscloud.com/compliance-contact-us.html | Level 37, 2/26 Park St, Sydney NSW 2000, Australia |
| Amazon Web Services EMEA SARL (AWS) | Server infrastructure and data hosting | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Server log data relating to the platform (IP address) Contractual information for the purpose of conducting business (billing contact details) | EU (EMEA/RoW customers only) | SCCs | AWS takes technical and contractual measures to protect data: Encryption of data in transit and at rest. Encryption key stored in the EU. https://d1.awstatic.com/legal/laws-gdpr/AWS_GDPR_DPA.pdf https://aws.amazon.com/blogs/security/aws-and-eu-data-transfers-strengthened-commitments-to-protect-customer-data/https://aws.amazon.com/blogs/security/new-standard-contractual-clauses-now-part-of-the-aws-gdpr-data-processing-addendum-for-customers/ | https://pages.awscloud.com/compliance-contact-us.html | 38 avenue John F. Kennedy, L-1855 Luxembourg |
| Auth0 (Okta) | User authentication | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Contents of profile from the clients’ chosen identity provider, if the client opts to log in using single-sign-on. Data is stored in your appropriate region (i.e. Americas customers = USA, APAC customers = Australia, EMEA/RoW customers = EU) | USA (Americas customers only) Australia (APAC customers only) EU (EMEA/RoW customers only) | SCCs | Data is encrypted at rest & in transit. See: https://auth0.com/legal | privacy@auth0.com | 100 First Street, 6th Floor, San Francisco, CA 94105, USA |
| Intercom, Inc. | Customer communication | Website visitor IP address Email address, IP address and geographic location of logged in user Other personal details that individuals choose to share as part of a support conversation | USA, EU | SCCs | Encryption of data in transit & at rest https://www.intercom.com/legal/security-policy | https://www.intercom.com/help/en/ | 55 2nd Street, 4th Floor, San Francisco, CA 94105 |
Optional / feature-specific subprocessors
| Sub-processor | Purpose | Data | Location | Transfer Mechanism | Supplemental Measures | Contact Details | Address |
| OpenAI | Optional AI / generative AI functionality within the Silktide platform. Disabled by default and used only where an authorised customer account administrator enables the relevant AI feature. | Customer content submitted to enabled AI features, such as prompts, page content, issue context, instructions and AI-generated outputs. May include personal data where included by the customer in that content. | USA | SCCs | OpenAI states that API and business customer inputs and outputs are not used to train or improve models by default; data is encrypted at rest and in transit; abuse monitoring logs may be retained for up to 30 days by default unless eligible retention controls are enabled; OpenAI maintains SOC 2 Type 2 and ISO 27001, 27017, 27018 and 27701 certifications. | privacy@openai.com | 1455 Third Street, San Francisco, CA 94158, USA |
| Google LLC | Optional generative AI functionality, including PDF remediation | Customer content submitted to enabled AI features, such as prompts, page content, issue context, instructions and AI-generated outputs. May include personal data where included by the customer in that content. | USA (processing may occur globally; Google gives no regional processing commitment for the Gemini API) | SCCs | Paid tier of the Gemini API only. Prompts and responses are not used to train or improve Google’s models. Encryption of data in transit and at rest. Prompts and responses logged only for a limited period for abuse detection. Processed under the Data Processing Addendum for Products Where Google is a Data Processor. Terms: https://ai.google.dev/gemini-api/terms | Google privacy contact form | 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA |