Review before publishing
This document is a draft for legal review and is not yet in force.
Subprocessors
The third parties that process customer personal data for TrustDesk and AccessWatch.
Version 0.9-draft · Last updated
These are the third parties that may process personal data on behalf of our customers when they use TrustDesk or AccessWatch. Each is bound by a data processing agreement. See our Data Processing Agreement for how we add or change subprocessors (at least 30 days' notice).
| Subprocessor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| [TO CONFIRM: server hosting provider] | Hosting of the application servers, database and file storage | EU | None: data stays in the EEA |
| [TO CONFIRM: off-site backup storage provider] | Encrypted nightly database backups, kept for 30 days | EU | None: data stays in the EEA |
| [TO CONFIRM: email delivery provider (SMTP)] | Sending service emails: sign-in links, invitations, reminders, reports | [TO CONFIRM: EU] | [TO CONFIRM: transfer mechanism, if outside the EEA] |
| Stripe Payments Europe, Limited (Ireland) | Payment processing, invoicing and tax calculation | EU, with transfers to Stripe, Inc. (USA) | EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and, where the recipient is certified, the EU–US Data Privacy Framework |
| Anthropic, PBC (USA) | AI drafting: questionnaire answers, policy wording and AccessWatch fix suggestions (only when ai features are switched on for the organization (they can be switched off)) | USA | EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and, where the recipient is certified, the EU–US Data Privacy Framework [TO CONFIRM: check Anthropic's current DPA and transfer mechanism] |
Products
- [TO CONFIRM: server hosting provider]: TrustDesk and AccessWatch
- [TO CONFIRM: off-site backup storage provider]: TrustDesk and AccessWatch
- [TO CONFIRM: email delivery provider (SMTP)]: TrustDesk and AccessWatch
- Stripe Payments Europe, Limited (Ireland): TrustDesk and AccessWatch (terms)
- Anthropic, PBC (USA): TrustDesk and AccessWatch (terms)
Changes
[TO CONFIRM: how customers subscribe to change notices, e.g. an email list or RSS feed] There are no planned changes.