Subprocessor
We are committed to full transparency regarding the external service providers (“subprocessors”) we use to support our platform. This page is designed to help all users—especially those in the EU, UK or otherwise subject to by the General Data Protection Regulation (GDPR)—understand which subprocessors are involved in the processing of their data, where data is stored, and under what circumstances GDPR or UK-GDPR applies.
For subprocessors that process personal identifiable information (PII), GDPR or UK-GDPR compliance is strictly observed. For services that only process non-personal or anonymized data, we clarify their limited data handling scope. The tables below allows each user to quickly identify which services may impact them and under what regulatory context.
Subprocessors used by all users (with 'EU-GDPR or UK-GDPR applies)
|
Subprocessor Name
|
Purpose
|
Data Center Location
|
|---|---|---|
|
Amazon Web Services, Inc.
|
Cloud hosting and infrastructure
|
EMEA uers: Frankfurt
APAC users: Tokyo |
|
Snowflake Inc.
|
Data warehousing and analytics
|
EMEA users: Frankfurt
APAC users: Tokyo |
|
Twilio Japan G.K.
|
Notification services (SMS, WhatsApp)
|
North Virginia
|
Subprocessors used only by certain users (with 'EU-GDPR or UK-GDPR applies)
|
Subprocessor Name
|
Purpose
|
Data Center Location(s)
|
Note
|
|---|---|---|---|
|
Sigma Computing, Inc.
|
Cloud-base data visualization (business intelligence) services | North Virginia |
Only for users utilizing Janitor Tracker (e.g., Mapsted, eElite).
For others, all data is completely anonymized. |
Subprocessors used by specific users in Non-EU / UK Territories (Not subject to GDPR or UK-GDPR)
|
Subprocessor Name
|
Purpose
|
Data Center Location(s)
|
Notes
|
|---|---|---|---|
|
Intellistack, LLC
|
Form Submission |
United States
|
Only for users utilizing SBX Connect - Checklist App (APAC Only) |
|
Box, Inc.
|
File storage
|
United States | Only for users utilizing SBX Connect - Checklist App (APAC Only) |