Sub-processor List
| Sub-processor | Purpose | Data | Location | Transfer Mechanism | Supplemental Measures | Contact Details | Address |
| Amazon Web Services, Inc. (AWS) | Server infrastructure and data hosting | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Server log data relating to the platform (IP address) Contractual information for the purpose of conducting business (billing contact details) | USA (US Customers Only). | SCCs | AWS takes technical and contractual measures to protect data: Encryption of data in transit and at rest. Encryption key stored in the US. https://d1.awstatic.com/legal/laws-gdpr/AWS_GDPR_DPA.pdf https://aws.amazon.com/blogs/security/aws-and-eu-data-transfers-strengthened-commitments-to-protect-customer-data/https://aws.amazon.com/blogs/security/new-standard-contractual-clauses-now-part-of-the-aws-gdpr-data-processing-addendum-for-customers/ | https://pages.awscloud.com/compliance-contact-us.html | 410 Terry Avenue North, Seattle, WA 98109-5210, U.S.A.Seattle, Washington 98121, USA |
| Amazon Web Services EU SARL. (AWS) | Server infrastructure and data hosting | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Server log data relating to the platform (IP address) Contractual information for the purpose of conducting business (billing contact details) | EU (Non-US Customers Only) | SCCs | AWS takes technical and contractual measures to protect data: Encryption of data in transit and at rest. Encryption key stored in the EU. https://d1.awstatic.com/legal/laws-gdpr/AWS_GDPR_DPA.pdf https://aws.amazon.com/blogs/security/aws-and-eu-data-transfers-strengthened-commitments-to-protect-customer-data/https://aws.amazon.com/blogs/security/new-standard-contractual-clauses-now-part-of-the-aws-gdpr-data-processing-addendum-for-customers/ | https://pages.awscloud.com/compliance-contact-us.html | 38 avenue John F. Kennedy, L-1855 Luxemburg |
| Auth0 (Okta) | User authentication | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Contents of profile from the clients’ chosen identity provider, if the client opts to log in using single-sign-on. Data is stored in your appropriate region (i.e. EU customers = EU, US customers = US) | USA (US Customers), EU (Non-US Customers) | SCCs | Data is encrypted at rest & in transit. See: https://auth0.com/legal | privacy@auth0.com | 10800 NE 8th Street Suite 700 Bellevue, WA 98004, USA |
| Gainsight, Inc. | Customer success and support | Basic contact information such as name, email address, phone number, job title. Includes email communications. | USA, EU | SCCs | Encryption of data in transit & at rest | privacy@gainsight.com | 655 Montgomery St, 7th Floor San Francisco, CA 94111, USA |
| Intercom, Inc. | Customer communication | Website visitor IP address Email address, IP address and geographic location of logged in user Other personal details that individuals choose to share as part of a support conversation | USA, EU | SCCs | Encryption of data in transit & at rest https://www.intercom.com/legal/security-policy | https://www.intercom.com/help/en/ | 55 2nd Street, 4th Floor, San Francisco, CA 94105 |
| Mouseflow ApS | Improve application experience | Website visitor IP address, Email address, geographic location of logged in user, browser & OS version | EU | SCCs | Encryption of data in transit & at rest, see: https://mouseflow.com/legal/company/data-security/ | legal@mouseflow.com | Flaesketorvet 68, 1711 Copenhagen V, Denmark |