Select Page

Translate this page:

Sub-processors

Effective starting: 15 November, 2021

Program owner and administrator specific sub-processors

Sub-processor services we use to engage and support your organisation. Entrants/applicants, nominators and judges/reviewers do not make use of these services.

Sub-processorWebsiteBusiness locationData processing location(s)Description of services provided
Chameleonhttp://trychameleon.comUnited StatesUnited StatesIn-app product tours.
Processes email addresses.
Uses Standard Contractual Clauses.
Technical security measures: https://www.trychameleon.com/security
Deepnotehttps://deepnote.comCalifornia, United StatesUnited StatesData pipeline management.
May process personal data.
Uses Standard Contractual Clauses.
Technical security measures: https://deepnote.com/security
Eleviohttps://elev.ioCollingwood, Victoria, AustraliaUnited StatesIn-app support panel.
Processes email addresses.
Uses Standard Contractual Clauses.
Hubspothttps://www.hubspot.comIrelandUnited StatesSoftware products for inbound marketing, sales, and customer service.
Processes personal data.
Uses Standard Contractual Clauses.
Technical security measures: https://www.hubspot.com/security
Intercomhttps://www.intercom.comSan Francisco, California, USUnited States (Virginia)Chat and support management within our software product.
Processes personal data.
Uses Standard Contractual Clauses.
Technical security measures: https://www.intercom.com/security
Klaushttps://klausapp.comEstoniaGermany (Frankfurt)Support team conversation review and QA platform.
Processes personal data.
Data is not processed outside of the EU.
Technical security measures: https://www.klausapp.com/security
Zendeskhttps://www.zendesk.comSan Francisco, California, USAustralia (Sydney)Client support management.
Processes personal data.
Uses Standard Contractual Clauses.
Technical security measures: https://www.zendesk.com/product/zendesk-security

All user sub-processors

Sub-processor services we use to engage and support your organisation, your program and your participants. All roles including program owners, administrators, entrants, applicants, nominators, judges and reviewers make use of these services.

SubprocessorWebsiteBusiness locationData processing location(s)Description of services provided
Amazon Web Serviceshttps://aws.amazon.com Seattle, Washington, USAustralia (Sydney)
Europe (Ireland and Germany)
United States (California)
Cloud hosting infrastructure for whole AF application stack.
Processes personal data.
Uses Standard Contractual Clauses.
Technical security measures:

 

Imgixhttps://www.imgix.com San Francisco, California, USUnited States (rendering)
Various edge nodes (caching)
Image processing service.
May process personal data captured in uploaded images and PDFs.
Uses Standard Contractual Clauses.
MailGunhttps://www.mailgun.com San Francisco, California, USGermany (Frankfurt)Email sending service.
Processes personal data used in the delivery and communication of email messages.
Uses Standard Contractual Clauses.
New Relichttps://newrelic.com San Francisco, California, USUnited StatesApplication monitoring.
May process personal data.
Uses Standard Contractual Clauses.
Technical security measures: https://drive.google.com/file/d/1pMixjKW1G-AuR8hcNwD8YsbOKlQbPq2F/view
Pusherhttps://pusher.com London, United KingdomUnited States (North Virginia)Push service.
Background processes use Pusher to send notifications on progress and file scanning.
May process IP addresses and cookies.
Uses Standard Contractual Clauses. Is GDPR and HIPAA compliant.
Stitchhttps://www.stitchdata.com United StatesUnited StatesETL data pipeline.
Processes personal data.
Uses Standard Contractual Clauses.
Technical security measures: https://www.stitchdata.com/platform/security
URL2PNGhttps://www.url2png.com East Derry, New Hampshire, USUnited StatesCapture screenshots from URLs.
May process personal data visible on publicly accessible websites.
Uses Standard Contractual Clauses.
Vonagehttps://www.vonage.comSan Francisco, California, USSingaporeSMS sending service.
May process personal data used in the delivery of SMS messages.
Uses Standard Contractual Clauses.
Technical security measures: