1 | Name | Data Location | PII | Purpose | SCC | SCC 2021 Status | Data Processing Addendum | Data Retention Period | Recovery Time Objective (RTO) | Recovery Point Objective (RPO) | From Date | Termination Date | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
2 | Heroku | EU | YES | Server & Data Hosting | 2021 | Available | https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf | 1 week | 4 hours | 1 hour | 01.07.2020 | ||
3 | Fivetran | US | YES | Aggregating Data from different sources (CRM, Tracking DB, ...) | 2021 | Available | https://fivetran.com/legal/data-protection-agreement | 1 week | 6 hours | 30 minutes | 01.07.2020 | ||
4 | Cloudinary | US | NO | Media Hosting | 2021 | Available | https://cloudinary-res.cloudinary.com/image/upload/v1648052611/Cloudinary-Customer-Data-Processing-Agreement-DPA-March-2022.pdf | N/A | 2 hours | 15 minutes | 01.07.2020 | ||
5 | Sentry | US | YES | Application Logging | 2021 | Available | https://sentry.io/legal/dpa/3.0.0/ | 90 days | 3 hours | 1 hour | 01.07.2020 | ||
6 | Mailjet | EU | YES | Transactional Email sending | 2021 | Available | https://www.mailjet.com/dpa/ | Indefinite | 4 hours | 2 hours | 01.07.2020 | ||
7 | AWS | US | NO | DNS Routing, Content Delivery Network, Static Code Hosting | 2021 | Available | https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf | N/A | 2 hours | 15 minutes | 01.07.2020 | ||
8 | Elastic | US | NO | Database Hosting | 2016 | Requested | https://www.elastic.co/pdf/agreements/dpa/elastic-cloud-gdpr-data-processing-addendum.pdf | N/A | 4 hours | 1 hour | 01.07.2020 | ||
9 | Cloudflare | US | NO | DNS Routing, Content Delivery Network, Static Code Hosting | 2021 | Available | https://www.cloudflare.com/cloudflare_customer_DPAv3.pdf, https://www.cloudflare.com/cloudflare_customer_SCCs.pdf | N/A | 1 hour | 30 minutes | 01.07.2020 | ||
10 | Beamer | US | YES | Product Updates in Neocom admin portal | 2021 | Available | https://drive.google.com/file/d/1fQw-Jq7mI-vkn7lq_zSX0DXY-bxcbZLg/view | N/A | N/A | N/A | 01.07.2020 | 16.02.2023 | |
11 | Google Analytics | US | YES | Analysation of usage of the Neocom Admin Portal | 2021 | Available | https://business.safety.google/adsprocessorterms/ | 26 months | 24 hours | 24 hours | 01.07.2020 | ||
12 | Fly.io | US | YES | Server & Data Hosting | 2021 | Available | https://drive.google.com/file/d/1igT-WprGLckvhN33SEhOjC13MSSMyafD/view?usp=sharing | 1 week | 4 hours | 1 hour | 01.07.2022 | 30.07.2024 | |
13 | Datadog | EU | YES | Application Logging & Server Monitoring | 2021 | Available | https://www.datadoghq.com/pdf/Datadog_GDPR_Data_Processing_Addendum_v2.0_2021.09.27.pdf | Indefinite | 2 hours | 1 hour | 01.07.2020 | 01.07.2020 | |
14 | DataFeedWatch | DE | NO | Processing & transforming product feeds | Requested | https://www.datafeedwatch.com/privacy-policy | N/A | 6 hours | 3 hours | 01.07.2020 | |||
15 | Hetzner | EU | NO | Optional storage for feeds | 2021 | Available | https://docs.hetzner.com/general/general-terms-and-conditions/data-privacy-faq/ | N/A | 4 hours | 2 hours | 01.07.2020 | ||
16 | DigitalOcean | EU | YES | Server & Data Hosting | 2021 | Available | https://www.digitalocean.com/legal/data-processing-agreement | 2 weeks | 4 hours | 1 hour | 01.03.2023 | ||
17 | Hubspot | US | YES | Customer Support Admin Portal & Help Center | 2022 | Available | https://legal.hubspot.com/dpa | Indefinite | 4 hours | 2 hours | 20.02.2023 | ||
18 | ClickHouse Cloud | EU | YES | Data Hosting | 2021 | Available | https://clickhouse.com/legal/agreements/data-processing-addendum | Indefinite | 3 hours | 1 hour | 01.05.2023 | ||
19 | Vitally | EU | YES | Customer Data & Customer Experience | 2021 | Available | https://www.vitally.io/saas-terms | Indefinite | 5 hours | 2 hours | 15.12.2023 | 14.10.2024 | |
20 | Fixie | EU | NO | HTTP Proxy and Tunneling | Requested | https://drive.google.com/file/d/14TN0QBJycmeb0i7e4v3WbM4UrBc6CVTo/view?usp=sharing | N/A | 6 hours | 3 hours | 05.01.2024 | |||
21 | OpenAI | US | YES | Large Language Model for genAI features | 2021 | Available | https://openai.com/policies/data-processing-addendum/ | 30 days | 2 hours | 15 minutes | 01.10.2024 | ||
22 | Microsoft Azure OpenAI | EU | YES | Large Language Model for genAI features | 2021 | Available | https://www.microsoft.com/licensing/docs/documents/download/MicrosoftProductandServicesDPA(WW)(English)(Jan022024)(CR).docx | 90 days | 1 hour | 15 minutes | 01.10.2024 | ||
23 | Grafana | EU | YES | Application Logging & Server Monitoring | 2021 | Available | https://grafana.com/legal/documents/grafana-labs-data-processing-agreement-ver2023.pdf | Indefinite | 2 hours | 1 hour | 01.10.2024 |