Subprocessors
This page lists the third parties [COMPANY LEGAL NAME] (“Entiti”, “we”, “us” or “our”) engages to process Customer Data on behalf of customers, the purpose of each engagement, and how customers are notified when the list changes.
Entiti uses a small number of infrastructure, communications and support providers to run the platform. Each is bound by written terms at least as protective as our Data Processing Addendum, has access only to what its purpose requires, and we tell customers before adding or replacing one.
1. What a subprocessor is
A subprocessor is a third party that processes Customer Data on our behalf to deliver the Entiti platform, for example a cloud provider that hosts the data or an email service that delivers notifications. Subprocessors do not include our own staff, integrations a customer chooses to connect, or recipients a customer directs us to share information with.
Customer Data means the entity records, documents, ownership, governance and related information a customer loads into or generates in Entiti, as defined in the applicable agreement and Data Processing Addendum (“DPA”). Business-contact, billing and website data that we process for our own purposes is covered by the Privacy Policy rather than this list.
2. Current subprocessors
| Subprocessor | Purpose and location |
|---|---|
| [CLOUD HOSTING PROVIDER] | Infrastructure, compute and storage for the Entiti platform. Customer Data is hosted in [HOSTING REGIONS]. |
| [DATABASE / STORAGE PROVIDER] | Managed database, backup and document storage. [HOSTING REGIONS]. |
| [AI MODEL PROVIDER] | Processing of Customer Data for AI Features, only as described in the applicable agreement and product documentation. [PROVIDER LOCATION]. |
| [EMAIL DELIVERY PROVIDER] | Transactional email, such as sign-in links, notifications and workflow alerts. [PROVIDER LOCATION]. |
| [SUPPORT PLATFORM PROVIDER] | Support ticketing and communication with authorized users, where a request includes Customer Data. [PROVIDER LOCATION]. |
| [MONITORING / LOGGING PROVIDER] | Application performance monitoring and error logging. Customer Data in logs is minimized. [PROVIDER LOCATION]. |
Where a customer’s agreement specifies a hosting region, Customer Data is stored with the providers above in that region. Support access from outside the region, where offered, is described in the DPA.
3. Affiliates
Affiliates of [COMPANY LEGAL NAME] may process Customer Data to support the platform, for example to provide customer support in a customer’s time zone, under the same obligations as any other subprocessor. Our affiliates that may process Customer Data are: [AFFILIATE ENTITIES OR NONE].
4. How we engage subprocessors
Before a subprocessor processes Customer Data, we:
- review its security and privacy practices, including relevant certifications, audit reports and incident history;
- put in place a written contract with data protection terms at least as protective as our DPA, including confidentiality, security measures, breach notification and assistance with data subject requests;
- limit its access to the Customer Data, and the purposes, that the engagement requires;
- rely on an appropriate transfer mechanism, such as standard contractual clauses or an equivalent, where Customer Data leaves the region in which it is hosted;
- remain responsible to the customer for the subprocessor’s performance of its obligations.
5. Changes to this list
We update this page when we add or replace a subprocessor. Customers can subscribe to change notices at [SUBPROCESSOR NOTICE EMAIL OR FORM]. Where the DPA provides a notice period, we give at least that notice before the new subprocessor processes Customer Data, and customers may object on reasonable data-protection grounds in the way the DPA describes.
A replacement needed urgently to keep the platform secure or available may be made immediately, with notice given as soon as practicable afterwards.
6. Contact
- [COMPANY LEGAL NAME]
- [REGISTERED ADDRESS]
- [PRIVACY_EMAIL]