To deliver the Services, Spendesk may engage and use data processors with access to certain personal data. This page provides important information about the identity, location and role of each sub-processor.
Spendesk group sub-processors
| Name of the sub-processor | Address of the sub-processor | Details of sub-processing operations | Processing location |
|---|---|---|---|
| Spendesk España SL | Calle Serrano 90, Planta 6, 28006 Madrid | Customer service and technical support | Spain |
| Spendesk GmbH | c/o WeWork - Warschauer Platz 11-13, 10245 Berlin | Customer service and technical support | Germany |
| Spendesk Italia S.R.L. | 1 Corso Giacomo Matteotti, CAP 20121, Milano (MI) | Customer service and technical support | Italy |
| Spendesk Limited | 11 Old Jewry, 8th Floor, London, Greater London EC2R 8DU | Customer service and technical support | United Kingdom |
Third-party sub-processors
| Name of the sub-processor | Address of the sub-processor | Details of sub-processing operations | Type of Personal Data processed | Processing location | Measures adopted |
|---|---|---|---|---|---|
| Amazon Web Services | Greenhills Road, Tymon North, Dublin, Ireland | Hosting services | Full name, professional email address and phone number, User ID, IBAN, usage data (feature), financial transactions on the Platform | European Union | DPA // AWS Compliance program: CAS / ISO 9001 / ISO 27001 / ISO 27017 / ISO 27018 / PCI DSS level 1 / SOC 1 / SOC 2 Type II / SOC 3 / FedRAMP |
| Amplitude, Inc. | 201 3rd Street, Suite 200, San Francisco, CA 94103, USA | Data analysis for Services performance | Professional email address, User ID, usage data | European Union / United States / Canada | DPA and standard contractual clauses // ISO 27001 / ISO 27018 / SOC 2 Type II // Amplitude is auto-certified Data Privacy Framework: www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001XZAAY |
| DataDog, Inc. | 620 8th Ave, 45th Floor, New York, NY 10018, USA | Data analysis for Services performance | Connection data (logs) | United States | DPA and standard contractual clauses // ISO 27001 / ISO 27017 / ISO 27018 / SOC 2 Type II // Datadog is auto-certified Data Privacy Framework: www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnxPAAS |
| Fivetran Inc. | 1221 Broadway, Suite 2400, Oakland, CA 94612, USA | Data analysis | Professional email address, User ID, usage data | United States | DPA and standard contractual clauses // ISO 27001 / SOC 1 / SOC 2 Type II // Fivetran is auto-certified Data privacy Framework: www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt00000008S1xAAE |
| Forest Admin, Inc. (operating in France through: Forest Admin) | 490 Post Street, Suite 640, San Francisco, CA 94102, USA (5 Rue Cadet, 75009 Paris, France) | Interface for data management | Full name, professional email address, User ID, IBAN, usage data (feature), financial transactions on the Platform | United States / European Union | DPA and standard contractual clauses |
| Intercom, Inc. | 55 2nd Street, 4th Floor, San Francisco, CA 94105, USA | Support platform / Messaging and ticketing system | Professional email address, User ID, message content | United States | DPA and standard contractual clauses // ISO 27001 / SOC 2 Type II / CSA // Intercom is auto-certified Data Privacy Framework: www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TNQvAAO |
| Klippa | Overhoeksplein 3, 1031 KS Amsterdam, Netherlands | Automated document management, classification and data extraction solutions | Professional email address, User ID, receipts and invoices | European Union | DPA // ISO 9001 / ISO 27001 / ISO 27017 / ISO 27018 / FedRAMP / SOC 1 / SOC 2 |
| Looker | 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | Data analysis | Professional email address, User ID, usage data | United States | DPA and standard contractual clauses // SOC 2 Type II / HIPAA / ISO 27001 |
| Mailjet | 13 bis rue de l’Aubrac, 75012 Paris, France | Email provider | Full name, professional email address, User ID | European Union | DPA |
| MessageBird | Trompenburgstraat 2C, 1079 TX Amsterdam, Netherlands | SMS provider | Full name, professional email address and phone number, User ID | European Union | DPA // ISO 27001 |
| Mindee | 14 rue Charles V, 75004 Paris, France | Parsing of invoices and receipts | Professional email address, User ID, receipts and invoices | European Union | DPA |
| Slack | 500 Howard St, San Francisco, CA 94105, USA | Approval notifications | User ID, Slack ID | European Union | DPA // ISO 27001 / 27017 / 27018 / SOC 3 // SAQ-A Self-certification questionnaire applicable in the payment card industry |
| Segment (Twilio) | 100 California St., Suite 700, San Francisco, CA 94111, USA | Data analysis | Full name, professional email address and phone number, User ID | United States | DPA and standard contractual clauses // ISO 27001 / ISO 27017 / ISO 27018 / SOC 2 Type II // Twilio is auto-certified Data Privacy Framework: www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TNLbAAO |
| Snowflake | San Mateo 450 Concar Drive, San Mateo, CA 94402, USA | Data analysis | Full name, professional email address, User ID, IBAN, usage data (feature), financial transactions on the Platform | United States | DPA and standard contractual clauses // ISO 27001 / SOC 2 Type II / SOC 1 / PCI DSS / HITRUST / HIPAA |
| Vitally, Inc. | 185 Wythe Ave, F2 Brooklyn, NY 11249, USA | Customer satisfaction software | Full name, professional email address, User ID | United States | DPA and standard contractual clauses // SOC 2 |
Updates
The sub-processors used by Spendesk may change over time. Spendesk will update this page and notify its customers of any new or different sub-processor as appropriate and necessary.