Sub-processors are third-party businesses engaged by a processor for performing data processing on behalf of a controller. According to the GDPR, these companies are also accountable for protection of an individual’s personal data. Data protection obligations of sub-processors are to be established by way of contract or other legal acts under the Union or Member State law. This includes providing sufficient guarantees to implement appropriate technical and organisational measures as specified in the regulation.

Visiocargo uses sub-processors (listed below), to assist in providing services as described in the our Terms of Service or a similar services agreement customers may have signed with us.

Governance

Visiocargo partners with organizations, that like itself adhere to global standards and regulations. Apart from evaluation for technical requirements, Visiocargo ensures examination of data protection measures, compliance with Visiocargo’ security requirements and security audit reports before close of contract. Initial agreements include review and approval of - provision for breach notification in the event of unwarranted data incidents, and necessary security measures for data protection.

Agreements

As part of Visiocargo’ revised Terms of Service & Privacy Notice for compliance, Visiocargo provides all EU customers a data processing addendum (DPA) that covers its obligations under the GDPR. You can find our DPA. It automatically applies to processing of EU personal data and no additional paperwork is required in this regard.

Visiocargo commits to keep this list updated regularly, to enable Controllers stay informed of the scope of sub-processing associated with Visiocargo services.

List of Sub-processors

Visiocargo utilises both infrastructure and services specific vendors to provide product and services to it’s Controllers (Visiocargo customers) and end-users. The following is an up-to-date list (as of 25th May 2018) of names and purpose of Visiocargo sub-processors and 3rd-party vendors:

Infrastructure & Services Sub-processors:

Visiocargo products and services operate on cloud platforms, listed in the table below. Visiocargo holds control and access to data hosted on these services, and resides in corresponding data center facilities based on location or choice(plan) of the Controller (Visiocargo’ customer). Data subsequently remains in the data center unless, shifted to ensure performance and availability of services, or specifically agreed between the Controller and Visiocargo as per needs of the Controller. The following table describes the services and purpose for which these infrastructure service providers have been engaged.

To be able to provide specific functionality within its products and services, Visiocargo partners with third-party services. These entities are sub-processors with access to service data (limited to purpose and use of indicated services) and are listed in the table below:

VENDOR PURPOSE DATA CENTERS* PRODUCTS
Digital Ocean Primary cloud infrastructure provider for Visiocargo, where all SaaS applications are hosted. Almost all data stored, processed and transmitted through Visiocargo products and services resides on Digital Ocean data centers.
European Economic Area

All
Google Cloud Platform Secondary cloud infrastructure provider of Visiocargo, data is stored and processed in Google Cloud Platform Data Centers. European Economic Area

All
SendGrid, Inc. Email Service Provider - managed mail servers are provided by SendGrid. Emails that are triggered programmatically from the applications are sent via SendGrid. United States All
Twilio Phone calls & SMS provider. Twilio provides a platform to programmatically initiate calls or SMS and also receiving them. Integrated as a service in Visiocargo application. United States All
Firebase microservice for Visiocargo application users.

United States
European Economic Area

All
Sumo Logic Machine data analytics service for log management and time series metrics. Help Visiocargo engineers troubleshoot (debug) customer reported, and Visiocargo identified issues. Visiocargo utilizes logs for performance tracking and indexing. United States
European Economic Area
All
logentries.com, Inc Log management and analytics service for cloud.Helps Visiocargo engineers troubleshoot (debug) customer reported, and Visiocargo identified issues. Visiocargo utilizes these logs for performance tracking. United States
European Economic Area
All
Segment Collects App events and sends them to track usage. United States All
Heap Inc. An application journey analytics service where App events are sent to track usage. Used as an event-based analytics tool, Heap offers detailed user-level views, advanced conversion funnels, segmentation analysis, and other ways of analyzing important data. European Economic Area All
Mixpanel An application journey analytics service where App events are sent to track usage. Used as an event-based analytics tool, Heap offers detailed user-level views, advanced conversion funnels, segmentation analysis, and other ways of analyzing important data. United States All
New Relic, Inc. Provides analytics for Application Performance Monitoring (APM). Trap errors in production code and helps in troubleshooting. Captures incoming traffic for Performance monitoring. United States
European Economic Area
All
Freshworks Provide solutions for support and sales, to engage with and delight both customers and employees. Products: Freshsales, Freshdesk, Freshteam, Freshconnect, Freshchat United States
European Economic Area
All
Planhat
Planhat is a Customer Success Platform built to make Customer Success simple.
European Economic Area All
Xero
Xero provides beautiful cloud accounting software for accounting professionals and small businesses, with over 600,000 global customers
Global

All
Chargebee
Chargebee is a PCI Level 1 certified subscription and recurring billing system for SaaS and subscription based eCommerce businesses

Global

All
Inline Manual
Inline Manual provides a service to guide, support and engage prospects and customers right within an application.

European Economic Area

All

However, if customers choose to use services like 3rd party integrations and apps, custom apps then data is expected to leave the EEA.