Cloudreach Subprocessors

Last updated on 13 December 2018

Cloudreach Europe Limited (“Cloudreach”) maintains a list of subprocessors authorised to process personal data on its behalf. Cloudreach might share personal data with subprocessors only to the extent necessary to provide our Services or for business support purposes. Cloudreach performs due diligence on the information security practices and data protection compliance of all subprocessors and requires each to commit to written obligations regarding their security controls and applicable regulations for the protection of personal data.

The following categories of subprocessors are used by Cloudreach:

Subscribing to receive notification of updates to the Subprocessor List

You can subscribe to receive email notifications for updates to the Cloudreach Subprocessor list by emailing subprocessors@cloudreach.com and including in your email the name of your organisation and the word “subscribe”. You can unsubscribe at any time by emailing subprocessors@cloudreach.com and including in your email the name of your organisation and the word “unsubscribe”.

Objecting to a Subprocessor 

Upon receiving any update notification from Cloudreach, a customer may object to Cloudreach’s use of a new subprocessor by notifying Cloudreach in writing dpo@cloudreach.com within ten (10) business days after receipt of Cloudreach’s notice in accordance with the mechanism set out above.

Provided the customer’s objection to a new subprocessor is based on reasonable grounds, Cloudreach will use reasonable efforts to make available to the customer a change in the provision of the Services to avoid processing of personal data by the objected-to new subprocessor without unreasonably burdening the Customer.

If Cloudreach is unable to make available such change within a reasonable period of time, which shall not exceed thirty (30) days, the Customer may terminate the applicable Order Form(s) with respect only to those Service(s) which cannot be provided by Cloudreach without the use of the objected-to new subprocessor by providing 30 days prior written notice to Cloudreach.

Cloudreach Affiliates

Subprocessor Name

Location

(transfer mechanism where outside of the EEA)

Brief description and purpose of the processing

Date added to this list

Cloudreach, Inc

United States

(standard contractual clauses)

In respect of Cloudreach's Affiliates, groups of individuals located in different offices may have a need to access Customer data for service delivery purposes and/or business support purposes.  

13 April 2018

Cloudreach SAS

France

13 April 2018

Cloudreach GmbH

Germany

13 April 2018

Cloudreach Canada Inc

Canada

(adequacy decision)

13 April 2018

Cloudreach Switzerland GmbH

Switzerland

(adequacy decision)

13 April 2018

Cloudreach BV

The Netherlands

13 April 2018

Cloudamize, Inc

United States

(standard contractual clauses)

13 April 2018

Cloudreach internal business support systems

Subprocessor Name

Location

(transfer mechanism where outside of the EEA)

Brief description and purpose of the processing

Date added to this list

Google LLC

United States

(Privacy Shield)

Google Suite used for communication, collaboration and storage

13 April 2018

Slack Technologies, Inc

United States

(standard contractual clauses)

Collaborative and instant messaging tool

13 April 2018

Salesforce.com, Inc

United States

(standard contractual clauses)

CRM solution

13 April 2018

FinancialForce.com Inc

United States

(standard contractual clauses)

Customer accounting, financial management and billing platform

13 April 2018

Xero Limited

New Zealand

(adequacy decision)

Accounting software

13 April 2018

Adobe Systems Incorporated

United States

(Privacy Shield)

Electronic signature

13 April 2018

HubSpot, Inc

United States

(standard contractual clauses)

Marketing services

13 April 2018

Jira/Confluence

(Atlassian PTY Ltd)

United States

(Privacy Shield)

Internal tooling used for project and tasks management and as knowledge base

13 April 2018

Trello, Inc

United States

(Privacy Shield)

Project management software

13 April 2018

Asana, Inc

United States

(standard contractual clauses)

Project management tool

13 April 2018

Smartsheet, Inc

United States

(Privacy Shield)

Spreadsheet-like user interface application used for project management

13 April 2018

Secret Server[1]

(Thycotic Software, LLC)

United States

Password management

13 April 2018

Bitbucket

(Atlassian PTY Ltd)

United States

(Privacy Shield)

Code management and repository

13 April 2018

GitHub, Inc

United States

(Privacy Shield)

Code Management and Repository

14 November 2018

Zendesk, Inc

United States

(Privacy Shield)

Customer Service Software & Support Ticket System used in relation to Cloudamize software

10 September 2018

AgileBits, Inc

(1Password)

Canada

(adequacy decision)

Password Management

29 November 2018

Subprocessors used only in the delivery of Cloud Operations services

Subprocessor Name

Location

(transfer mechanism where outside of the EEA)

Brief description and purpose of the processing

Date added to this list

Bitdefender SRL

 Romania

Malware threats detections and remediations[2]

13 April 2018

Pager Duty, Inc  

United States

(standard contractual clauses)

Alerting / Notifications Tool

10 September 2018

ServiceNow UK Ltd

United Kingdom

IT service and operations management[3]

13 April 2018

Cylance, Inc

United States

(standard contractual clauses)

Malware threats detections and remediations

14 November 2018

Datadog, Inc

United States

(standard contractual clauses)

Monitoring and Alerting

13 December 2018

Cloud service providers (CSP)

Subprocessor Name

Location

(transfer mechanism where outside of the EEA)

Brief description and purpose of the processing

Date added to this list

Amazon Web Services

(AWS Inc)

United States

(standard contractual clauses)

Use of AWS by Cloudreach to host all Cloudreach data and systems;

 Potential additional use of AWS to host Customer data under an AWS platform agreement

13 April 2018

Google Cloud

(Google LLC)

United States

(Privacy Shield)

Use of GCP to host Customer data under a GCP agreement or a Cloudreach agreement which includes Cloudamize software

13 April 2018

Microsoft Azure

(Microsoft Corporation)

United States

(Privacy Shield)

Use of GCP to host Customer data under a Microsoft Azure platform agreement or a Cloudreach agreement which includes Cloudamize software  

13 April 2018

Heroku, Inc

United States

(Privacy Shield)

Use of Heroku pursuant to a Cloudreach Connect License Agreement, Heroku being the hosting provider on which Cloudreach Connect software is running

13 April 2018

Independent software vendors (ISV), products expressly licensed to customers

Subprocessor Name

Location

(transfer mechanism where outside of the EEA)

Brief description and purpose of the processing

Date added to this list

Alert Logic, Inc

United States

(standard contractual clauses)

Use of Alert Logic software for security threat detection purposes under a licence agreement

13 April 2018

CloudHealth Technologies, Inc[4]

United States

(Binding Corporate Rules)

Use of CloudHealth software under a licence agreement

13 April 2018

Splunk Inc

United States

(Privacy Shield)

Use of Splunk software under a licence agreement

13 April 2018

New Relic Inc

United States

(standard contractual clauses)

Use of New Relic software under a licence agreement

13 April 2018

CloudEndure Ltd[5]

Israel

(adequacy decision)

Use of CloudEndure software under a licence agreement

13 April 2018

Zadara Storage Ltd

Israel

(adequacy decision)

Use of Zadara software under a licence agreement

13 April 2018

Chef Software, Inc[6] 

United States

(Privacy Shield)

Use of Chef tooling

under a licence agreement

13 April 2018


[1] In the process of being replaced with another password and identity management provider. Please contact Cloudreach if you request more information.  

[2] Bitdefender licences can also be purchased independently.

[3] In limited circumstances, ServiceNow may also be used by in the delivery of professional services.

[4] CloudHealth software is also used by Cloudreach in the delivery of a Cloudreach Cost Control Agreement and in some cases for billing calculation purposes of Cloud Operations services.

[5] In limited circumstances, CloudEndure may also be used by in the delivery of professional services.

[6] In limited circumstances, Chef software may also be used by Cloudreach in the delivery of cloud operations services in a SaaS version.