List of data sub-processors

Entity nameEntity locationPurpose of ProcessingLevel of data protectionAdditional data-protection related certifications

Core-Services related

Amazon Web Services EMEA SARL

38 Avenue John F. Kennedy, L-1855, Luxembourg

Luxembourg

Server-Region: EU

Hosting, file storage, backup & sending of transactional emailsStandard Contractual ClausesISO/IEC 27001:2013,

ISO 27017,

ISO 27018,

SOC 1,

SOC 2,

SOC 3,

PCI DSS Level 1,

Privacy Shield

salesforce.com Inc. (Heroku Inc.)

415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA

USA

Server-Region: EU

Hosting, file storage & backupStandard Contractual ClausesISO 27001,

ISO 27017,

ISO 27018,

SOC 1,

SOC 2,

SOC 3,

Privacy Shield

Support, System & Infrastructure related

Cloudflare, Inc.

101 Townsend Street, San Francisco, CA 94107, USA

USADNS related routing and security, Content delivery networkStandard Contractual ClausesISO 27001:2013,

SOC 2 Type II,

SOC 3,

PCI DSS 3.2.1,

Privacy Shield

Google Ireland Ltd.

Gordon House, Barrow Street, Dublin 4, Ireland

IrelandApplication Analytics, E-Mail, Internal Tools, Cloud StorageStandard Contractual ClausesISO 27001,

SOC 2 Type II,

Privacy Shield

Help Scout Inc.

100 City Hall Plaza, 5th Floor, Boston, MA 02108, USA

USACustomer Support, Knowledge BaseStandard Contractual ClausesPCI Level III,

Privacy Shield

Postmark

(Wildbit LLC)

2400 Market Street, Suite 235B, Philadelphia, PA 19103, USA

USATransactional E-Mails concerning the return processStandard Contractual ClausesPrivacy Shield
Sentry (Functional Software Inc.)

132 Hawthorne Street, San Francisco, CA 94107, USA

USAApplication Error analysisStandard Contractual ClausesSOC-2,

Privacy Shield

Sumo Logic Inc.

305 Main Street, Redwood City, CA 94063, USA

USASystem logging & DebuggingStandard Contractual ClausesISO 27001,

SOC 2 Type II,

Privacy Shield

Sendinblue SAS

55 rue d’Amsterdam, 75008 Paris, France

FranceTransactional E-Mails concerning the return processStandard Contractual ClausesEU based company
ZOHO Corporation B. V.

Beneluxlaan 4B, 3527 HT Utrecht, Netherlands

Support functions carried out by ZOHO Corporation PVT. LTD, Estancia IT Park, Plot No. 140 & 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India

Netherlands

Server-Region: EU

Cloud-Based Software-Suite supporting functions in Sales, Marketing, Email, Internal Collaboration, Finance, IT, Help Desk, Business Intelligence, Process AutomationStandard Contractual ClausesISO/IEC 27001,

ISO/IEC 27701,

ISO/IEC 27017,

ISO/IEC 27018,

ISO 9001,

SOC 2 Type II,

PCI compliant

Only applicable to Custom-Plans

Chargebee Inc.

340 S Lemon Avenue, #1537, Walnut, CA 91789, USA

USAManagement of SaaS subscriptionsStandard Contractual ClausesISO 27001,

SOC 1,

SOC 2,

PCI DSS,

Privacy Shield

Stripe Inc.

510 Townsend Street, San Francisco, CA 94103, USA

USAProcessing of Customer PaymentsStandard Contractual ClausesPCI Service Provider Level 1,

Privacy Shield