Subprocessors

List of Subprocessors

Last updated: March 3, 2024.

What is a subprocessor?

In order to provide our Services, Certifier engages the subprocessors listed below. A subprocessor is a third-party engaged by Certifier to process Users’ and Recipients’ personal data.

How do I subscribe to new subprocessor notifications?

Users may sign up to receive notification of new subprocessors by emailing support@certifier.io with the subject “Subscribe to New Subprocessors”.

Once User has signed up to receive new subprocessor notifications, Certifier will then provide User with notice of any new subprocessor before authorizing such new subprocessor to process Users’ or Recipients’ personal data and allow User ten (10) days to submit a legitimate, good-faith objection to such new subprocessor(s) from User’s receipt of Certifier’ notice.

List of third-party subprocessors

Kindly take note, we exclusively transfer and process Recipients' personal data through Amazon Web Services, our platform for hosting infrastructure, databases, and applications.

Please be aware, all other subprocessors listed below do not handle Recipients' personal data. These subprocessors are solely engaged in processing only Certifier Users' personal data. We wanted to underline this key distinction for clarity and peace of mind.

Amazon Web Services

Full Legal Name: Amazon Web Services EMEA SARL.

Address: 38 Avenue John F. Kennedy, L-1855 Luxembourg, Luxembourg, Europe.

Hosting Location: Dublin, Ireland.

Description of Service: Amazon Web Services (AWS) provides a comprehensive cloud computing platform offering a wide range of cloud services including computing power, storage options, and networking capabilities.

Purpose of Processing: It is used for hosting infrastructure, databases, and applications. It processes data to ensure the availability, integrity, and scalability of hosted services and applications.

Data Processed: Users’ personal data (full name, email, company details, etc), credential Recipients’ personal data (full name, email, any other data provided by User).

Data Security Certifications: Several, including ISO 27001, SOC 1, SOC 2, SOC 3.

Contact Information: aws-EU-privacy@amazon.com

More information about security and data privacy at AWS is available at https://aws.amazon.com/security/ and https://aws.amazon.com/privacy/

Google Cloud

Full Legal Name: Google Cloud Poland Sp. z o.o.

Address: Emilii Plater 53, 00-113 Warsaw, Poland, Europe.

Hosting Location: EU.

Description of Service: Google Cloud is a cloud-based suite including Gmail, Docs, Drive, and Meet, offering productivity and collaboration tools for businesses and organizations.

Purpose of Processing: It processes data to support email, document management, scheduling, and real-time collaboration, enhancing productivity and ensuring secure data sharing and storage.

Data Processed: Users’ personal data (full name, email, company details, etc).

Data Security Certifications: Several, including ISO 27001, SOC 1, SOC 2, SOC 3.

Contact Information: dpo-google@google.com

More information about security and data privacy at Google Cloud is available at https://cloud.google.com/security and https://cloud.google.com/terms/cloud-privacy-notice

Stripe

Full Legal Name: Stripe Technology Europe, Limited.

Address: 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland, Europe.

Hosting Location: EU.

Description of Service: Stripe provides online payment processing for internet businesses, offering solutions for processing transactions, managing business operations, and facilitating commerce.

Purpose of Processing: It processes data to facilitate secure payment transactions, prevent fraud, and manage payment-related operations for businesses and their customers.

Data Processed: Users’ personal data (full name, email, company details, etc).

Data Security Certifications: Several, including SOC 1, SOC 2.

Contact Information: privacy@stripe.com

More information about security and data privacy at Stripe is available at https://docs.stripe.com/security and https://stripe.com/en-pl/privacy

ChargeBee

Full Legal Name: ChargeBee Inc.

Address: 909 Rose Avenue, Suite 610, North Bethesda, MD 20852, USA.

Hosting Location: Frankfurt, Germany.

Description of Service: ChargeBee is a subscription billing and revenue management platform designed to automate recurring billing, subscription management, and invoicing operations.

Purpose of Processing: It processes data to manage subscription lifecycles, handle recurring payments, and provide customers with billing support, thus enabling efficient subscription-based business models.

Data Processed: Users’ personal data (full name, email, company details, etc).

Data Security Certifications: Several, including ISO 27001, SOC 1, SOC 2.

Contact Information: privacy@chargebee.com

More information about security and data privacy at Chargebee is available a https://www.chargebee.com/security/ and https://www.chargebee.com/privacy/

User.com

Full Legal Name: User.com Sp. z o.o.

Address: Grzybowska 87, 00-844 Warsaw, Poland, Europe.

Hosting Location: Gravelines, France.

Description of Service: User.com is a comprehensive marketing automation platform that offers tools for email marketing, live chat, and customer relationship management (CRM).

Purpose of Processing: It processes data to facilitate personalized marketing campaigns, manage customer interactions, and automate communication workflows to improve customer engagement and support.

Data Processed: Users’ personal data (full name, email, company details, etc).

Data Security Certifications: data processing agreement, with standard contractual clauses, in place.

Contact Information: greg@user.com

More information about security and data privacy at User.com is available at https://www.user.com/en/security/security-overview and https://www.user.com/en/security/privacy-policy

ChartMogul

Full Legal Name: ChartMogul GmbH & Co. KG.

Address: Kemperplatz 1, 10785 Berlin, Germany, Europe.

Hosting Location: Dublin, Ireland.

Description of Service: ChartMogul provides subscription analytics and revenue reporting tools designed to analyze, understand, and grow subscription-based businesses through data insights.

Purpose of Processing: It processes subscription data to provide businesses with analytics and insights on their revenue, customer lifecycle, and subscription metrics, aiding in data-driven decision-making.

Data Processed: Users’ personal data (full name, email, company details, etc).

Data Security Certifications: SOC 2.

Contact Information: privacy@chartmogul.com

More information about security and data privacy at ChartMogul is available at https://chartmogul.com/security/ and https://chartmogul.com/privacy/

Startdeliver

Full Legal Name: Startdeliver AB.

Address: Klarabergsgatan 60, 111 21 Stockholm, Sweden, Europe.

Hosting Location: Frankfurt, Germany.

Description of Service: Startdeliver is a customer success platform that offers tools and features to enhance customer relationships, including onboarding flows, customer feedback collection, and engagement analytics.

Purpose of Processing: It processes data to support customer success initiatives, such as improving customer onboarding experiences, collecting and analyzing feedback to inform product improvements, and monitoring customer engagement to proactively address issues and retain customers.

Data Processed: Users’ personal data (full name, email, company details, etc).

Data Security Certifications: data processing agreement, with standard contractual clauses, in place.

Contact Information: onilsson@startdeliver.com

More information about security and data privacy at Startdeliver is available at https://support.startdeliver.com/en/articles/7845368-startdeliver-compliance-with-eu-data-transfer-requirements and https://support.startdeliver.com/en/articles/4782038-privacy-policy

HubSpot

Full Legal Name: HubSpot Ireland Ltd.

Address: Ground Floor, Two Dockland Central, Guild St, North Dock, Dublin, D01 K2C5, Ireland, Europe.

Hosting Location: Frankfurt, Germany.

Description of Service: HubSpot offers a cloud-based CRM platform that provides software and services for inbound marketing, sales, and customer service.

Purpose of Processing: It processes data to facilitate customer relationship management, inbound marketing strategies, sales tracking, and customer service activities, aiming to attract, engage, and delight customers throughout their lifecycle.

Data Processed: Users’ personal data (full name, email, company details, etc).

Data Security Certifications: Several, including ISO 27001, SOC 2, SOC 3.

Contact Information: privacy@hubspot.com

More information about security and data privacy at HubSpot is available at https://legal.hubspot.com/security and https://legal.hubspot.com/privacy-policy

Security that scales with your business

Certify scales with you, providing secure administration, authentication, and permissions infrastructure as you grow.