Current as of the 30th November 2021
We share certain information with companies that may be considered our "sub-processors" under GDPR. Below is a full list of our data sub-processors.
| Company | Purpose | Data | Location | Transfer Mechanism | Supplemental Measures | Contact Details |
|---|---|---|---|---|---|---|
| Amazon Web Services Inc. | Web and application servers | All application data except payment details and authentication passwords. | EU + USA | SCCs | Encryption of data in transit and at rest. Encryption key stored in the EU. |
Contact 410 Terry Avenue North, Seattle, WA 98109-5210, USA |
| Intercom, Inc. | Support services | Name, email address, sales and support conversations. | USA | SCCs | Encryption of data in transit and at rest. More in Intercom's security practices | compliance@intercom.com 55 2nd Street, 4th Fl., San Francisco, CA 94105 |
| Google LLC (Workplace) | Email service, internal documents | Name, email address, sales and support conversations. Customer contracts. Calendar information (if connected through the app). | USA | SCCs | Encryption of data in transit and at rest for Google Workspace.
External Encryption Key storage outside of Google‘s technical infrastructure. Data Processing and Security Terms EU Data Protection Compliance |
Contact Googleplex. 1600 Amphitheatre Pkwy, Mountain View, CA 94043 |
| Google LLC (Analytics) | Anonymised website and app analytics | IP address, browsing data (both marketing site and PingPong app). | USA | SCCs | Encryption of data in transit and at rest for Google Workspace.
External Encryption Key storage outside of Google‘s technical infrastructure. Data Processing and Security Terms EU Data Protection Compliance |
Contact Googleplex. 1600 Amphitheatre Pkwy, Mountain View, CA 94043 |
| Hotjar Ltd. | Anonymised website and app analytics | IP address, browsing data (both marketing site and PingPong app). | Malta | SCCs | Encryption of data in transit and at rest Privacy Data Protection Compliance |
Contact Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 |
| Microsoft Corporation (Azure) | Passwordless sign-on option | Name, email address (if Microsoft account is used to sign in). Calendar information (if connected through the app). | EU + USA | SCCs | Encryption of data in transit and at rest. More information on Microsoft's encryption More information on Cross-Border Data Flows |
Contact One Microsoft way, Redmond, Washington 98052, USA |
| Recrea Systems, SLU (Quaderno) | Accounting and invoicing | Our clients billing details for the invoices. Company name, email, address, VAT ID, purchase history. | EU | No data is transferred outside the EU. | Security policy | legal@quaderno.io
Recrea Systems, SLU, Bravo Murillo 34 – 35003, Las Palmas |
| Stripe Inc. | Payment Gateway | Our clients billing details for card transactions. Credit card details, company name, email, address, purchase history. | USA | SCCs | Data is encrypted at rest and in transit. Data Transfer Policy |
dpo@stripe.com 510 Townsend Street, San Francisco, CA 94103, USA |
| Twilio Inc. | Video call backend & SMS service | Video, audio and screenshare feeds of the call participants. Phone numbers for reminders and verifcation. | USA | SCCs | Encryption of data at rest and in transit. Twilio security overview |
dpo@twilio.com 101 Spear Street, 1st Floor San Francisco, California 94105, USA |
