Data Subprocessors

Iteratively may use data processors (each, a “Subprocessor”) with access to certain Customer Data or Personal Information. This page provides information about each Subprocessor. Subscribe to receive notices of additions to the Subprocessor List.

Amazon Web Services

• Location: United States
• Data processed: application customer data, personal customer data
• Use: application infrastructure (by Heroku); AWS Cognito authentication
• Data security certifications: Privacy Shield, ISO 27001, SOC3

Heroku

• Location: United States
• Data processed: application customer data, personal customer data
• Use: application infrastructure
• Data security certifications: Privacy Shield, ISO 27001, 27017, 27018, SOC 2 Type 1

Intercom

• Location: United States
• Data processed: user name, email address, IP address
• Use: in-app customer support, in-app product tours, and customer communication
• Data security certifications: SOC 2 Type 2

Mixpanel

• Location: United States
• Data processed: user name, email address, IP address, analytics
• Use: product analytics
• Data security certifications: SOC 2, ISO 27001 Data Center, and EU Privacy Shield

Amplitude

• Location: United States
• Data processed: user name, email address, IP address, analytics
• Use: product analytics
• Data security certifications: Privacy Shield, SOC 2 Type 2, ISO 27001

FullStory

• Location: United States
• Data processed: user name, email address, session replay
• Use: product analytics, proactive support
• Data security certifications: SOC 2 Type II

Segment

• Location: United States
• Data processed: user name, email address, IP address, analytics
• Use: product analytics
• Data security certifications: ISO 27001, 27017, 27018

Mailchimp

• Location: United States
• Data processed: user name, email address
• Use: email marketing, subprocessor updates
• Data security certifications: SOC 2