To deliver the Services, Spendesk may engage and use data processors with access to certain personal data. This page provides important information about the identity, location and role of each sub-processor.
Spendesk group sub-processors
| Name of the sub-processor | Address of the sub-processor | Details of sub-processing operations | Processing location |
|---|---|---|---|
| Spendesk España SL | Calle Serrano 90, Planta 6, 28006 Madrid | Customer service and technical support | Spain |
| Spendesk GmbH | c/o WeWork - Warschauer Platz 11-13, 10245 Berlin | Customer service and technical support | Germany |
| Spendesk Italia S.R.L. | 1 Corso Giacomo Matteotti, CAP 20121, Milano (MI) | Customer service and technical support | Italy |
| Spendesk Limited | 11 Old Jewry, 8th Floor, London, Greater London EC2R 8DU | Customer service and technical support | United Kingdom |
Third-party sub-processors
| Name of the sub-processor | Address of the sub-processor | Details of sub-processing operations | Type of Personal Data processed | Processing location | Measures adopted |
|---|---|---|---|---|---|
| Airbyte, Inc. | 2261 Market Street #4381 San Francisco, CA 94114, USA | Data analysis, ETL provider | Professional email address, User ID, usage data | European Union | DPA and standard contractual clauses // ISO 27001 / SOC 2 Type II |
| Amazon Web Services EMEA SARL | 38 Avenue John F. Kennedy, L-1855, Luxembourg | Hosting services | Full name, professional email address and phone number, User ID, IBAN, usage data (feature), financial transactions on the Platform | European Union | DPA // AWS Compliance program: CAS / ISO 9001 / ISO 27001 / ISO 27017 / ISO 27018 / PCI DSS level 1 / SOC 1 / SOC 2 Type II / SOC 3 / FedRAMP |
| Amplitude, Inc. | 201 3rd Street, Suite 200, San Francisco, CA 94103, USA | Data analysis for Services performance | Professional email address, User ID, usage data | European Union / United States / Canada | DPA and standard contractual clauses // ISO 27001 / ISO 27018 / SOC 2 Type II // Amplitude is auto-certified Data Privacy Framework |
| MessageBird (Bird B.V.) | Trompenburgstraat 2C, 1079 TX Amsterdam, Netherlands | SMS provider | Full name, professional email address and phone number, User ID | European Union | DPA // ISO 27001 |
| DataDog, Inc. | 620 8th Avenue, 45th Floor, New York, NY 10018, USA | Data analysis for Services performance | Connection data (logs) | European Union / United States | DPA and standard contractual clauses // ISO 27001 / ISO 27017 / ISO 27018 / SOC 2 Type II // Datadog is auto-certified Data Privacy Framework |
| Fivetran Inc. | 1221 Broadway, Suite 2400, Oakland, CA 94612, USA | Data analysis, ETL provider | Professional email address, User ID, usage data | United States | DPA and standard contractual clauses // ISO 27001 / SOC 1 / SOC 2 Type II // Fivetran is auto-certified Data privacy Framework |
| Forest Admin, Inc. (operating in France through: Forest Admin) | 490 Post Street, Suite 640, San Francisco, CA 94102, USA (5 rue Cadet, 75009 Paris, France) | Interface for data management | Full name, professional email address, User ID, IBAN, usage data (feature), financial transactions on the Platform | European Union / United States | DPA and standard contractual clauses |
| Generix Group SAS | ARTEPARC – Bât. A, 2 rue des peupliers 59810 Lesquin, France | E-invoicing platform provider | Full name, professional email address, invoice data | European Union | DPA // ISO 27001 |
| Intercom R&D Unlimited Company | 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2, Ireland | Support platform / Messaging and ticketing system | Professional email address, User ID, message content | United States | DPA and standard contractual clauses // ISO 27001 / SOC 2 Type II / CSA // Intercom is auto-certified Data Privacy Framework |
| Looker (Google Cloud France SARL) | 8 rue de Londres, 75009 Paris, France | Data analysis | Professional email address, User ID, usage data | European Union / United States | DPA and standard contractual clauses // SOC 2 Type II / ISO 27001 |
| Mailjet SAS | 43 rue de Dunkerque, 75010 Paris, France | Email provider | Full name, professional email address, User ID | European Union | DPA |
| Mindee SAS | 14 rue Charles V, 75004 Paris, France | Parsing of invoices and receipts | Professional email address, User ID, receipts and invoices | European Union | DPA // SOC 2 |
| Oceancall Group SAS | Puyricard, 170 rue de la Coquillade, 13540 Aix-en-Provence, France | Customer support | Identification data, message content, usage data | European Union | DPA |
| Dust (Permutation Lab SAS) | 86 avenue de Wagram, 75017 Paris, France | Bot assistant for support platform | Professional email address, User ID, message content | European Union | DPA // SOC2 Type II |
| Slack (Salesforce.com France SAS) | 3 Avenue Octave Gréard, 75007 Paris, France | Approval notifications | User ID, Slack ID | European Union | DPA // ISO 27001 / 27017 / 27018 / SOC 2 / SOC 3 // SAQ-A Self-certification questionnaire applicable in the payment card industry |
| Segment (Twilio Ireland Limited) | 70 Sir John Rogerson’s Quay, Dublin 2, D02 R296, Ireland | Data analysis, ETL provider | Full name, professional email address and phone number, User ID | European Union / United States | DPA // ISO 27001 / ISO 27017 / ISO 27018 / SOC 2 Type II |
| Snowflake Computing Netherlands B.V. | Gustav Mahlerlaan 300-314, 1082 ME Amsterdam, Netherlands | Data analysis | Full name, professional email address, User ID, IBAN, usage data (feature), financial transactions on the Platform | European Union / United States | DPA and standard contractual clauses // ISO 27001 / SOC 2 Type II / SOC 1 / PCI DSS / HITRUST |
| Vitally, Inc. | 109 South 5th Street, Suite 4113, Brooklyn, NY 11249, USA | Customer satisfaction software | Full name, professional email address, User ID | European Union / United States | DPA and standard contractual clauses // SOC 2 |
| Zerocoma, S.L. | Calle Conde de Peñalver, 36, 28006 Madrid, España | Invoices certified digitalisation (Spanish customers only) | Full name, professional email address | European Union | DPA |
Updates
The sub-processors used by Spendesk may change over time. Spendesk will update this page and notify its customers of any new or different sub-processor as appropriate and necessary.