{"id":46531,"date":"2023-08-09T08:30:43","date_gmt":"2023-08-09T08:30:43","guid":{"rendered":"https:\/\/syndigo.com\/marketing-request-2\/"},"modified":"2026-03-27T07:15:31","modified_gmt":"2026-03-27T11:15:31","slug":"subscription-clients-subprocessors","status":"publish","type":"page","link":"https:\/\/syndigo.com\/de\/subscription-clients-subprocessors\/","title":{"rendered":"Syndigo Sub-Processors"},"content":{"rendered":"\n
\n
\n
\n

Syndigo Sub-Processors<\/h1>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n\n
\n
Universal<\/a><\/div>\n\n\n\n
CES<\/a><\/div>\n\n\n\n
PIM-MDM<\/a><\/div>\n\n\n\n
Nutritionix API<\/a><\/div>\n\n\n\n
PowerReviews<\/a><\/div>\n<\/div>\n\n\n\n
\n
\n

Universal Sub-Processors<\/h2>\n\n\n\n

Core services supporting all products<\/em><\/p>\n\n\n

\n\n\n\n\t\n\n\t
Sub- Processor Name<\/th>Address\/ Processing Locations<\/th>Contact Details<\/th>Description of Processing<\/th>Data Transfer Mechanism<\/th>\n<\/tr>\n<\/thead>\n
Rapid7 LLC
\n
\nEffective from April 13, 2026
\n<\/td>		USA (120 Causeway Street, Suite 400, Boston, MA 02114)<\/td>privacy@rapid7.com<\/td>The subject matter of the Processing pertains to the provision of cybersecurity monitoring, analysis, and consulting services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: monitoring, analysis, and consultation in the process of reviewing cybersecurity alerts or incidents.
\n<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
\n

CES Sub-Processors<\/h2>\n\n\n
\n\n\n\n\t\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Sub- Processor Name<\/th>Address\/ Processing Locations<\/th>Contact Details<\/th>Description of Processing<\/th>Data Transfer Mechanism<\/th>\n<\/tr>\n<\/thead>\n
Critical Insight, Inc.
\n(Formerly DBA Cl Security)<\/td>		USA
\n(245 4th St Ste 405
\nBremerton, WA 98337)<\/td>		privacy@criticalinsight.com<\/td>The subject matter of the Processing pertains to the provision of cybersecurity consulting services and analysis pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is limited to the duration of investigations by the Sub-Processor on cybersecurity incidents.
\n
\nThe nature of the Processing involves: consultation in the process of reviewing cybersecurity alerts or incidents.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Databricks, Inc.<\/td>USA
\n(160 Spear Street, 13th Floor San Francisco, CA 94105)<\/td>		privacy@databricks.com<\/td>The subject matter of the Processing pertains to the provision of data management platform and analytics services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: data analysis.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Flexential Corp.<\/td>USA
\n(600 Forest Point Circle, Suite 100, Charlotte, NC 28273)<\/td>		privacy@flexential.com<\/td>The subject matter of the Processing pertains to the provision of co-location data services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: collection, recording, organization, storage, retrieval or otherwise making available, erasure, or destruction.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Iron Mountain Inc.<\/td>USA
\n(1 Federal Street, Boston, MA 02110, U.S.A)<\/td>		global.privacy@ironmountain.com<\/td>The subject matter of the Processing pertains to the provision of record management services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: destruction of shredded paperwork.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Microsoft Corporation.<\/td>USA
\n(One Microsoft Way, Redmond, WA 98052)<\/td>		https:\/\/www.microsoft.com\/en-us\/concern\/privacy<\/a><\/td>The subject matter of the Processing pertains to the provision of Azure Infrastructure services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: storage.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Navisite, LLC.<\/td>USA
\n(400 Minuteman Road, Andover, MA 01810)<\/td>		privacy@navisite.com<\/td>The subject matter of the Processing pertains to the provision of emergency Database Administration (DBA) services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: organization, disclosure, erasure.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Okta, Inc.<\/td>USA
\n(100 First Street, San Francisco, California 94105)<\/td>		privacy@okta.com<\/td>The subject matter of the Processing pertains to the provision of identity and access management cloud services pursuant to the services agreement with the sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the sub-Processor.
\n
\nThe nature of the Processing involves: identity and access management and related services.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Pendo.io, Inc.<\/td>USA
\n(150 Fayetteville Street, Suite 1400, Raleigh, North Carolina 27601)<\/td>		gdpr@pendo.io<\/td>The subject matter of the Processing pertains to the provision of product analytics to optimize user experience pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: data analysis.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Salesforce.com, Inc.<\/td>USA
\n(Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105)<\/td>		privacy@salesforce.com<\/td>The subject matter of the Processing pertains to the provision of notifications to CXH users in case of outages pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: collection, recording, organization, storage, retrieval, erasure, or destruction.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Twilio, Inc.<\/td>USA
\n(375 Beale Street
\nSuite 300
\nSan Francisco, CA 94105)<\/td>		privacy@twilio.com<\/td>The subject matter of the Processing pertains to the provision of an automated emailing system for Syndigo\u2019s customer notification pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: collection, recording, organization, storage, retrieval, erasure, or destruction.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Syndigo LLC (for customers entering into the Syndigo Europe DPA)<\/td>USA
\n(141 W. Jackson Blvd., Ste 1220 Chicago, IL 60604)<\/td>		privacy@syndigo.com<\/td>The subject matter of the Processing pertains to the provision of the services (remote access to provide customer support; consultation of personal data to process customer support, etc.).
\n
\nThe duration of the Processing is generally determined by the Intra Group Data Transfer Agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: collection, recording, organization, storage, retrieval, erasure, or destruction.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
\n

PIM-MDM Sub-Processors<\/h2>\n\n\n
\n\n\n\n\t\n\n\t\n\t\n\t\n\t\n\t
Sub- Processor Name<\/th>Address\/ Processing Locations<\/th>Contact Details<\/th>Description of Processing<\/th>Data Transfer Mechanism<\/th>\n<\/tr>\n<\/thead>\n
Syndigo LLC (for customers entering into the Syndigo Europe DPA)<\/td>USA
\n(141 W. Jackson Blvd., Ste 1220 Chicago, IL 60604)<\/td>		privacy@syndigo.com<\/td>The subject matter of the Processing pertains to the provision of the services (remote access to provide customer support; consultation of personal data to process customer support, etc.).
\n
\nThe duration of the Processing is generally determined by the Intra Group Data Transfer Agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: collection, recording, organization, storage, retrieval, erasure, or destruction.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Riversand Technologies Europe AG<\/td>Switzerland
\n(Gubelstrasse 11 6300 Zug)<\/td>\n<\/tr>\n
Riversand Technologies India Private Limited<\/td>India
\n(IBC Knowledge Park, Tower D,
\n8th Floor, Bannerghatta Main Road, Bangalore, Karnataka 560029)<\/td>\n<\/tr>\n
Microsoft Ireland Operations, Ltd.<\/td>Ireland
\n(South County Business Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521)<\/td>		https:\/\/www.microsoft.com\/en-us\/concern\/privacy<\/a><\/td>The subject matter of the Processing pertains to the provision of Azure Cloud services (European MS Azure Cloud) pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: storage.<\/td>		N\/A<\/td>\n<\/tr>\n
Auth0 Inc.<\/td>USA
\n(10800 NE 8th Street, Suite 700, Bellevue, WA 98004)<\/td>		privacy@auth0.com<\/td>The subject matter of the Processing pertains to the provision of customer support services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: collection, recording, organization, storage, retrieval or otherwise making available, erasure.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
\n

Nutritionix API<\/h2>\n\n\n
\n\n\n\n\t\n\n\t\n\t\n\t
Sub- Processor Name\t<\/th>Address\/ Processing Locations<\/th>Contact Details<\/th>Description of Processing<\/th>Data Transfer Mechanism<\/th>\n<\/tr>\n<\/thead>\n
Amazon Web Services, Inc.<\/td>USA
\n(410 Terry Avenue North, Seattle, WA, 98109)
\n0 Chicago, IL 60604)<\/td>		https:\/\/aws.amazon.com\/privacy\/<\/a><\/td>The subject matter of the Processing pertains to the provision of databases, storage and compute services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: storage and computational services.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
Red Hat, Inc.<\/td>USA
\n(100 East Davie Street, Raleigh, NC 27601)<\/td>		privacy@redhat.com<\/a><\/td>The subject matter of the Processing pertains to the provision of Application Programming Interface Infrastructure (3scale) services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: collection, , organization, storage, retrieval for the purposes of delivering the API Infrastructure.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n
CloudFlare, Inc.<\/td>USA
\n(101 Townsend St.
\nSan Francisco CA 94107)<\/td>		dpo@cloudflare.com<\/a><\/td>The subject matter of the Processing pertains to the provision of application security and Domain Name System (DNS) services pursuant to the services agreement with the Sub-Processor.
\n
\nThe duration of the Processing is generally determined by the services agreement with the Sub-Processor.
\n
\nThe nature of the Processing involves: security analysis of network and application traffic, DNS services.<\/td>		The Standard Contractual Clauses under Article 46 of the GDPR.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
\n

PowerReviews Services<\/h2>\n\n\n
\n\n\n\n\t\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Corporate Name<\/th>Country where it is established or from which it may access the Personal data\t<\/th>Subcontracted Services<\/th>\n<\/tr>\n<\/thead>\n
Sumologic<\/td>United States of America\t<\/td>Application and platform log retention<\/td>\n<\/tr>\n
Upwork<\/td>United States of America, Colombia, Philippines, Mauritius, Brazil, France, Morocco, Suriname, Dominican Republic<\/td>Content Moderation services<\/td>\n<\/tr>\n
Amazon Web Services (AWS)<\/td>United States of America\t<\/td>Hosting of PowerReviews Platform<\/td>\n<\/tr>\n
iOvation<\/td>United States of America\t<\/td>Anti-fraud services (based on device information)<\/td>\n<\/tr>\n
Wyng<\/td>United States of America\t<\/td>Collation of rich media<\/td>\n<\/tr>\n
Cloudinary<\/td>United States of America and Israel\t<\/td>Image hosting and content delivery<\/td>\n<\/tr>\n
Datadog<\/td>United States of America\t<\/td>Application and platform log retention<\/td>\n<\/tr>\n
Google<\/td>United States of America\t<\/td>Display reviews for Google Seller Ratings and\/or Google Shopping<\/td>\n<\/tr>\n
Snowflake<\/td>United States of America\t<\/td>Hosting provider<\/td>\n<\/tr>\n
Sendgrid<\/td>United States of America\t<\/td>Consumer facing emails<\/td>\n<\/tr>\n
OneTrust\t<\/td>United States of America\t<\/td>DSAR Request facilitation<\/td>\n<\/tr>\n
Amazon Cloudfront<\/td>United States of America
\nCDN with servers located globally<\/td>		Content delivery network<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n<\/div><\/div>\n\n\n
\n
\n

Please fill out the form below to receive updates on this list.<\/h2>\n
\n