Sub-processors

SafetyCulture uses sub-processors to process personal data on behalf of its customers. SafetyCulture ensures that each sub-processor implements appropriate technical and organisational measures to ensure such processing meets the requirements of applicable data privacy legislation, and to protect the rights of data subjects.

SafetyCulture evaluates each sub-processor initially and on a regular (at least annual) basis. We also adopt supplementary measures to protect such personal data. The supplementary measures are described at https://safetyculture.com/security

When we engage a new sub-processor, or remove a sub-processor, we will update this page. You can subscribe to receive notifications of such changes by entering your details in the form below. If you have questions or concerns about a new sub-processor, we are happy to help. Please contact us at privacy@safetyculture.com.

SafetyCulture sub-processors

Name of sub-processor
Description of processing
Location of sub-processor (entity)Website
Transfer mechanism
Amazon Web ServicesData hosting; transmission and recording of callsUnited Stateshttps://aws.amazon.com/SCCs
ApprovalMaxApproval workflow toolUnited Kingdomhttps://www.approvalmax.comAdequacy Decision
AtlassianIntranet and ticket trackingUnited Stateshttps://www.atlassian.com/SCCs
AvalaraSales tax reportingUnited Stateshttps://www.avalara.com/SCCs
BrazeCustomer communicationsUnited Stateshttps://www.braze.com/SCCs
ChargifyCustomer invoicingUnited Stateshttps://www.chargify.com/SCCs
CloudflareInternet securityUnited Stateshttps://www.cloudflare.com/SCCs
DocuSignElectronic signaturesUnited Stateshttps://www.docusign.com/SCCs
eWayCredit card paymentsAustraliahttps://www.eway.com.au/SCCs
GoogleInternal company infrastructureUnited Stateshttps://www.google.com/SCCs
KustomerCustomer supportUnited Stateshttps://www.kustomer.com/SCCs
ImpartnerCustomer relationship managementUnited Stateshttps://impartner.comSCCs
Marketo (an Adobe company)Marketing automationUnited Stateshttps://www.marketo.com/SCCs
MicrosoftWorkplace operations toolsUnited Stateshttps://www.microsoft.com/SCCs
NetsuiteFinancial managementUnited Stateshttps://www.netsuite.com.au/SCCs
OktaCustomer identity managementUnited Stateshttps://www.okta.com/SCCs
OpenAIContent creation and automationUnited Stateshttps://openai.com/SCCs
OutreachCustomer relationship managementUnited Stateshttps://www.outreach.io/SCCs
PaddlePayment processing and trackingUnited Stateshttps://www.paddle.com/SCCs
SafetyCulture affiliatesSupport services and product featuresUnited Kingdom; United States; Philippines; Amsterdamhttps://safetyculture.com/SCCs; Adequacy Decision
SegmentUser analyticsUnited Stateshttps://www.segment.com/SCCs
SendGridEmail service providerUnited Stateshttps://www.sendgrid.com/SCCs
SFDC Australia Pty Ltd trading as SalesforceCustomer relationship management; analyticsAustraliahttps://www.salesforce.com/SCCs
SlackChat communicationsUnited Stateshttps://www.slack.com/SCCs
SnowflakeData warehouseUnited Stateshttps://www.snowflake.com/SCCs
StripePayment processorUnited Stateshttps://www.stripe.com/SCCs
TesorioAccounts receivable managementUnited Stateshttps://www.tesorio.com/SCCs
TwilioTransactional mail service providerUnited Stateshttps://www.twilio.com/SCCs
VitallyCustomer success management platformUnited Stateshttps://www.vitally.io/SCCs
WorkatoPlatform integration productUnited Stateshttps://www.workato.com/SCCs
XeroFinancial managementNew Zealandhttps://www.xero.com/au/Adequacy Decision
ZoomVideo and audio communicationsUnited Stateshttps://www.zoom.us/SCCs

EdApp sub-processors

Data current as of September 2022

Name of sub-processorDescription of processingLocation of sub-processor (entity)
Amazon Web ServicesData storage and processingUSA
AtlassianWorkflow and content distributionUSA
CiscoCorporate network hardwareUSA
CloudinaryMedia transformationUSA
DatadogProduct usageUSA
ElasticemailEmail sendingCanada
FormIOContent creationUSA
Google LLCContent creationUSA
Hevo DataData transformationUSA
HubspotCustomer relationship managementUSA
KnockEmail sendingUSA
MailgunEmail sendingUSA
Mailchimp (Mandrill)Email sendingUSA
Microsoft CorporationContent creationUSA
Mongo AtlasData storageUSA
NetSuiteFinancial managementUSA
OktaIdentity ProviderUSA
PandaDocDocument managementUSA
SlackCorporate chatUSA
SnowflakeData storageUSA
StitchData transformationUSA
TesorioCustomer financial managementUSA
TwilioEmail sendingUSA
ZapierIntegration servicesUSA

SHEQSY sub-processors

Data current as of November 2022

Name of sub-processorDescription of processingLocation of sub-processor (entity)
Amazon Web Services (AWS)Primary web and cloud hosting for SHEQSYUSA
ART Security24×7 monitoring center response to duress alerts generated from SHEQSY in Australia and New ZealandAustralia
ChargifyCustomer invoicingUSA
ClicksendSend SMS and email notifications from SHEQSYAustralia
DocusignElectronic signaturesUSA
FreshdeskCustomer supportUSA
Google SuiteCorporate email and content creationUSA
KustomerCustomer supportUSA
LeadChatWebsite chatAustralia
MarketoLead IdentificationAustralia
MicrosoftContent creation and collaborationUSA
NetSuiteFinancial managementUSA
OktaIdentity ProviderUSA
SalesforceCustomer Relationship ManagementUSA
SlackCorporate messagingUSA
StripeCredit card paymentsUSA
TwilioSend SMS, email and automated phone call notifications. Also used for SMS from SHEQSY app when employee phone has no mobile data for check-in or duress alarmUSA
XEROFinancial managementNew Zealand