Sub-processors of your data
SafetyCulture uses sub-processors to process personal data on behalf of its customers. SafetyCulture ensures that each sub-processor implements appropriate technical and organisational measures to ensure such processing meets the requirements of applicable data privacy legislation, and to protect the rights of data subjects.
SafetyCulture evaluates each sub-processor initially and on a regular (at least annual) basis. We also adopt supplementary measures to protect such personal data. The supplementary measures are described at https://safetyculture.com/security.
When we engage a new sub-processor, or remove a sub-processor, we will update this page. You can subscribe to receive notifications of such changes by entering your details in the form below. If you have questions or concerns about a new sub-processor, we are happy to help. Please contact us at privacy@safetyculture.com.
SafetyCulture sub-processors
Name of sub-processor | Description of processing | Location of sub-processor (entity) | Website | Transfer mechanism |
Amazon Web Services | Data hosting; transmission and recording of calls | United States | SCCs | |
ApprovalMax | Approval workflow tool | United Kingdom | Adequacy Decision | |
Atlassian | Intranet and ticket tracking | United States | SCCs | |
Avalara | Sales tax reporting | United States | SCCs | |
Braze | Customer communications | United States | SCCs | |
Chargify | Customer invoicing | United States | SCCs | |
Cloudflare | Internet security | United States | SCCs | |
DocuSign | Electronic signatures | United States | SCCs | |
eWay | Credit card payments | Australia | SCCs | |
Internal company infrastructure | United States | SCCs | ||
Kustomer | Customer support | United States | SCCs | |
Impartner | Customer relationship management | United States | SCCs | |
Intercom | Customer Support | Ireland | SCCs | |
LogRocket | User Experience Analytics | United States | SCCs | |
MaestroQA | Customer support and quality assurance | United States | SCCs | |
Marketo (an Adobe company) | Marketing automation | United States | SCCs | |
Microsoft | Workplace operations tools | United States | SCCs | |
Netsuite | Financial management | United States | SCCs | |
Okta | Customer identity management | United States | SCCs | |
OpenAI | Content creation and automation | United States | SCCs | |
Outreach | Customer relationship management | United States | SCCs | |
Paddle | Payment processing and tracking | United States | SCCs | |
SafetyCulture affiliates | Support services and product features | United Kingdom; United States; Philippines; Amsterdam | SCCs; Adequacy Decision | |
Segment | User analytics | United States | SCCs | |
SendGrid | Email service provider | United States | SCCs | |
SFDC Australia Pty Ltd trading as Salesforce | Customer relationship management; analytics | Australia | SCCs | |
Slack | Chat communications | United States | SCCs | |
Snowflake | Data warehouse | United States | SCCs | |
Stripe | Payment processor | United States | SCCs | |
Tesorio | Accounts receivable management | United States | SCCs | |
Twilio | Transactional mail service provider | United States | SCCs | |
Vitally | Customer success management platform | United States | SCCs | |
Workato | Platform integration product | United States | SCCs | |
Xero | Financial management | New Zealand | Adequacy Decision | |
Zoom | Video and audio communications and customer support | United States | SCCs |
EdApp sub-processors
Data current as of September 2022
Name of sub-processor | Description of processing | Location of sub-processor (entity) |
Amazon Web Services | Data storage and processing | USA |
Atlassian | Workflow and content distribution | USA |
Cisco | Corporate network hardware | USA |
Cloudinary | Media transformation | USA |
Datadog | Product usage | USA |
Elasticemail | Email sending | Canada |
FormIO | Content creation | USA |
Google LLC | Content creation | USA |
Hevo Data | Data transformation | USA |
Hubspot | Customer relationship management | USA |
Knock | Email sending | USA |
Mailgun | Email sending | USA |
Mailchimp (Mandrill) | Email sending | USA |
Microsoft Corporation | Content creation | USA |
Mongo Atlas | Data storage | USA |
NetSuite | Financial management | USA |
Okta | Identity Provider | USA |
PandaDoc | Document management | USA |
Slack | Corporate chat | USA |
Snowflake | Data storage | USA |
Stitch | Data transformation | USA |
Tesorio | Customer financial management | USA |
Twilio | Email sending | USA |
Zapier | Integration services | USA |
SHEQSY sub-processors
Data current as of November 2022
Name of sub-processor | Description of processing | Location of sub-processor (entity) |
Amazon Web Services (AWS) | Primary web and cloud hosting for SHEQSY | USA |
ART Security | 24×7 monitoring center response to duress alerts generated from SHEQSY in Australia and New Zealand | Australia |
Chargify | Customer invoicing | USA |
Clicksend | Send SMS and email notifications from SHEQSY | Australia |
Docusign | Electronic signatures | USA |
Freshdesk | Customer support | USA |
Google Suite | Corporate email and content creation | USA |
Kustomer | Customer support | USA |
LeadChat | Website chat | Australia |
Marketo | Lead Identification | Australia |
Microsoft | Content creation and collaboration | USA |
NetSuite | Financial management | USA |
Okta | Identity Provider | USA |
Salesforce | Customer Relationship Management | USA |
Slack | Corporate messaging | USA |
Stripe | Credit card payments | USA |
Twilio | Send SMS, email and automated phone call notifications. Also used for SMS from SHEQSY app when employee phone has no mobile data for check-in or duress alarm | USA |
XERO | Financial management | New Zealand |