Privacy and Security
Subprocessors
Purpose and Scope
This document lists the required processors (that process personal information) that RainFocus engages to offer select features on the RainFocus Platform.
Optional sub-processors will be used only when certain integrations and apps are requested by the Client, a list of these may be provided upon request.
Definitions
Processor | Purpose for Processing | Data Types Processed | Location (Country) |
---|---|---|---|
API Layer | Convert html to PDF via their service PDFLayer |
| Austria |
Adobe LMS | Provide training on how to use the RainFocus Platform |
| Canada |
Amplitude | Tracks all actions and data taken on the RainFocus Platform, except for PCI data. |
| United States |
AWS | Majority of cloud hosting is done within this environment. Unless being hosted in IBM by choice. | All data comes through this platform. | United States |
https://ipdata.co | Determine an individual's location to enable compliance with applicable data privacy regulations | IP address. And based on the IP address' approximated location (which is usually the internet service provider's externally facing router) the following information:
| United States |
Intercom | (Admin-only) This is for in-app messaging. So if we release a new feature, we can pop up a message telling them about it. We can target the message to a specific page or a specific group of users (such as email domain). Intercom can also send out emails to admin users, but we don't use it for that (yet). |
| United States |
NewRelic | Performance monitoring. | Data contained in logs, such as name, email, IP address, userID, user actions taken (e.g., button clicked, username changed, etc.), etc. | United States |
OneTrust | Data security and privacy GRC, fulfilling DSAR requests, etc. | Only data submitted by clients for data subject requests will be processed by OneTrust | United States |
Opsgenie | On-call alerting is done using this tool. | Possibly some client / attendee data recorded in an error or other type of communications. | Australia |
Salesforce | Client facing ticketing system, receive client support requests and responses. |
| United States |
Sendgrid | Enable emails to be sent out, on behalf of clients, from the RainFocus Platform. It also enables password resets, MFA, etc. |
| United States |