Subprocessors
Source: https://www.responsly.com/terms-and-policies/subprocessors/
These are the companies that help us provide Responsly. Subprocessors marked "Yes" in the "Processes Customer data" column may process personal data that Customers entrust to us under the Data Processing Agreement. The others process data for which we are the controller, such as account and billing data.
How we announce changes
We announce a new or replacement subprocessor at least 14 days before the change by email to the Account owner. You can object within that period at gdpr@responsly.com.
Current list
| Subprocessor | Purpose | Location | Processes Customer data | Transfer basis |
|---|---|---|---|---|
| Amazon Web Services | Hosting, data storage, email delivery | EU | Yes | Not applicable (EEA) |
| DigitalOcean | Hosting, data storage | EU | Yes | Not applicable (EEA) |
| Cloudflare | Content delivery, security, abuse prevention, DNS | Global (including the USA) | Yes, in transit only (encrypted network traffic) | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| OpenAI | Language models for AI features (e.g. response analysis) | Ireland, USA | Yes, only when the Customer uses AI features | Standard Contractual Clauses (SCCs) |
| Twilio | SMS and WhatsApp delivery, phone features | USA | Yes, phone numbers and message content when the Customer sends SMS or WhatsApp invitations | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| Mailgun | Email delivery, including survey invitations | USA | Yes, only when the Customer sends email invitations through the Provider's sending infrastructure instead of its own mailbox | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| MailerSend | Email delivery, including survey invitations | EU | Yes, only when the Customer sends email invitations through the Provider's sending infrastructure instead of its own mailbox | Not applicable (EEA) |
| Postmark | Email delivery, including survey invitations | USA | Yes, only when the Customer sends email invitations through the Provider's sending infrastructure instead of its own mailbox | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| Customer.io | Transactional, informational and marketing messages to Customers | USA | No | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| Website analytics and tag management (Google Analytics, Google Tag Manager) | USA | No | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) | |
| Sentry | Application error monitoring | USA | No | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| Oh Dear | Uptime monitoring | EU | No | Not applicable (EEA) |
| Help Scout | Customer support | USA | No | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| Missive | Customer communication | Canada | No | European Commission adequacy decision |
| Stripe | Payment processing | Ireland, USA | No | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| Amplitude | Product usage analytics | USA | No | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| Segment | Product usage analytics | USA | No | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
| Mixpanel | Product usage analytics | USA | No | EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) |
