Voyado Engage sub-processor information
Applicable sub-processors
Voyado uses the sub-processors below for Voyado Engage. For some of Engage’s Components and Third Party Services, additional sub-processor may apply, if so, these will be listed in the table “Components and Third-Party Services” below.
Third country data transfer
Voyado’s main processing of personal data takes place within the EU. For some sub-processors processing of personal data outside of the EU/EEA may occur. Please see information on applicable transfer and transfer tools below.
EU/UK/Swiss transfer to the US
For transfer to the US, Voyado’s sub-processors relies on either the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), see information below, or the Standard Contractual Clauses, (the “SCC”). The EU -US DPF shall be used as a first resort. Please see information in the table below for what applies for each sub-processor.
The EU-U.S. DPF, the UK Extension to the EU-U.S. Data Privacy Framework (UK Extension to the EU-U.S. DPF), and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) were respectively developed in furtherance of transatlantic commerce by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration to provide U.S. organizations with reliable mechanisms for personal data transfers to the United States from the European Union / European Economic Area, the United Kingdom (and Gibraltar), and Switzerland while ensuring data protection that is consistent with EU, UK, and Swiss law.
The effective date of the EU-U.S. DPF Principles, including the Supplemental Principles and Annex I of the Principles is July 10, 2023, which is the date of entry into force of the European Commission’s adequacy decision for the EU-U.S. DPF. The adequacy decision enables the transfer of EU personal data to participating organizations consistent with EU law.
Transfer Impact Assessment
If you need additional information to perform a data transfer impact assessment, please contact your account manager for such.
Voyado Engage Standard sub-processors
The sub-processors below apply for all customers using Voyado Engage regardless of which Components you use.
Additional Components and Third-party suppliers
The sub-processors below apply only if you use the applicable Component and or Third-Party Service. Please check your license agreement or contact your AM to confirm which Components/Third-party Service that applies for you.
Component/functionality |
Sub-processor(s) |
Data Center Location |
Transfer tool |
Possible third country data flow |
Sub-processors and Links |
Webhooks |
Svix
|
USA and Ireland |
The SCCs for Svix, EU-U.S. DPF (AWS) |
The US |
Sub-processors: AWS, Auth0 Inc. Google LLC, Slack Technologies Inc, Github Inc. Svix
Technical and organisational security measures: Not available online, please contact your AM for more information. |
Data Enrichment, monitoring, search (onboarding) |
Dun & Bradstreet |
|
The SCCs |
The US |
Sub-processors:
DPA.pdf (dnb.co.uk)
Technical and organizational security measures:
DPA.pdf (dnb.co.uk) |
Shopify integration |
Eastside Co,
AWS Europe / Amazon Web Services EMEA SARL, Laravel FORGE / Laravel LLC / Svix Inc |
Eastside (UK), AWS (Ireland), Forge (International)
Svix (North Europe) |
The SCCs and EU-U.S. DPF (AWS) |
The US |
AWS sub-processors: Amazon Web Services (AWS) Sub-processors
AWS technical and organizational security measures: Cloud Security – Amazon Web Services (AWS) |
Version 2.1 September 2023.
This document may be subject to updates from time to time.
Receive updates on sub-processor information
If you want to receive updates when we make changes or updates regarding our sub-processors you need to subscribe using the link below.