Sub-processor List
| Sub-processor | Purpose | Data | Location | Transfer Mechanism | Supplemental Measures | Contact Details | Address |
| Amazon Web Services, Inc. (AWS) | Server infrastructure and data hosting (US Customers) | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Server log data relating to the platform (IP address) Contractual information for the purpose of conducting business (billing contact details) | USA | SCCs | AWS takes technical and contractual measures to protect data: Encryption of data in transit and at rest. Encryption key stored in the US. https://d1.awstatic.com/legal/laws-gdpr/AWS_GDPR_DPA.pdf https://aws.amazon.com/blogs/security/aws-and-eu-data-transfers-strengthened-commitments-to-protect-customer-data/https://aws.amazon.com/blogs/security/new-standard-contractual-clauses-now-part-of-the-aws-gdpr-data-processing-addendum-for-customers/ | https://pages.awscloud.com/compliance-contact-us.html | 410 Terry Avenue North, Seattle, WA 98109-5210, U.S.A.Seattle, Washington 98121, USA |
| Amazon Web Services EU SARL. (AWS) | Server infrastructure and data hosting (Non-US Customers) | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Server log data relating to the platform (IP address) Contractual information for the purpose of conducting business (billing contact details) | EU | SCCs | AWS takes technical and contractual measures to protect data: Encryption of data in transit and at rest. Encryption key stored in the EU. https://d1.awstatic.com/legal/laws-gdpr/AWS_GDPR_DPA.pdf https://aws.amazon.com/blogs/security/aws-and-eu-data-transfers-strengthened-commitments-to-protect-customer-data/https://aws.amazon.com/blogs/security/new-standard-contractual-clauses-now-part-of-the-aws-gdpr-data-processing-addendum-for-customers/ | https://pages.awscloud.com/compliance-contact-us.html | 38 avenue John F. Kennedy, L-1855 Luxemburg |
| Auth0 (Okta) | User authentication | Basic contact information for the purpose of logging in (name, email address, job title, phone number) Contents of profile from the clients’ chosen identity provider, if the client opts to log in using single-sign-on. Data is stored in your appropriate region (i.e. EU customers = EU, US customers = US) | USA, EU | SCCs | Data is encrypted at rest & in transit. See: https://auth0.com/legal | privacy@auth0.com | 10800 NE 8th Street Suite 700 Bellevue, WA 98004, USA |
| Gainsight, Inc. | Customer success and support | Basic contact information such as name, email address, phone number, job title. Includes email communications. | USA, EU | SCCs | Encryption of data in transit & at rest | privacy@gainsight.com | 655 Montgomery St, 7th Floor San Francisco, CA 94111, USA |
| Gong.io Inc | Revenue intelligence | Contact and business details such as name, email, phone number, position, IP address, workplace and related business insights. | USA | SCCs | Encryption of data in transit & at rest | help@gong.io | 201 Spear St. 13th Floor, San Francisco, CA 94105 |
| Google, Inc. | Collaboration suite, email, shared drive storage | Partial IP address of website visitors, linked to browsing history while using our website Emails, including email address, IP address, email contents Contracts and files sent by clients as email attachments. Attendees, dates and times of appointments stored in Google Calendar | USA, EU | SCCs | Encryption of data in transit & at rest for Google Cloud Platform and Google Workspace. External Encryption Key storage outside of Google’s technical infrastructure. EU Data Protection Compliance: Google Cloud International Data Transfer Mechanisms | https://support.google.com/cloud/contact/dpo | 1600 Amphitheatre Pkwy Mountain View, California 94043, USA |
| Intercom, Inc. | Customer communication | Website visitor IP address Email address, IP address and geographic location of logged in user Other personal details that individuals choose to share as part of a support conversation | USA, EU | SCCs | Encryption of data in transit & at rest https://www.intercom.com/legal/security-policy | https://www.intercom.com/help/en/ | 55 2nd Street, 4th Floor, San Francisco, CA 94105 |
| PandaDoc, Inc. | Legal | Name, Email address, Job Title, Contract/Financial terms, payment information | USA | SCCs | Encryption of data in transit & at rest | privacyteam@pandadoc.com | 3739 Balboa St. #1083, San Francisco, CA 94121 |
| Rollbar, Inc. | Error reporting and tracking | User details associated with error messages Name Email address IP address | USA | SCCs | Data encrypted at rest and in transfer https://docs.rollbar.com/docs/securityhttps://docs.rollbar.com/docs/privacy-policyhttps://rollbar.com/knowledge-base/gdpr-rollbar/ | privacy@rollbar.com | 51 Federal Street, Suite 401 San Francisco, CA 94107, USA |
| Xero Limited (Xero) | Business operations; accounting, invoices, billing | Invoicing information | USA, EU | N.A. | Encryption of data in transit & at rest | https://central.xero.com/s/article/Privacy-at-Xero | 1615 Platte Street Suite 400 Denver, CO 80202 |
| Zapier, Inc. | Workflow automation | Name, Email Address, IP Address | USA | SCCs | Encryption of data in transit & at rest | privacy@zapier.com | 548 Market St. #62411, San Francisco, CA 94104-5401 |