Privacy and Security
Subprocessors
Purpose and Scope
This document lists the required processors (that process personal information) that RainFocus engages to offer select features on the RainFocus Platform.
Optional sub-processors will be used only when certain integrations and apps are requested by the Client, a list of these may be provided upon request.
Definitions
| Processor | Purpose for Processing | Data Types Processed | Location (Country) |
|---|---|---|---|
| API Layer | Convert html to PDF via their service PDFLayer |
| Austria |
| Adobe LMS | Provide training on how to use the RainFocus Platform |
| Canada |
| Amplitude | Tracks all actions and data taken on the RainFocus Platform, except for PCI data. |
| United States |
| AWS | Majority of cloud hosting is done within this environment. Unless being hosted in IBM by choice. | All data comes through this platform. | United States |
| https://ipdata.co | Determine an individual’s location to enable compliance with applicable data privacy regulations | IP address. And based on the IP address’ approximated location (which is usually the internet service provider’s externally facing router) the following information:
| United States |
| Intercom | (Admin-only) This is for in-app messaging. So if we release a new feature, we can pop up a message telling them about it. We can target the message to a specific page or a specific group of users (such as email domain). Intercom can also send out emails to admin users, but we don’t use it for that (yet). |
| United States |
| NewRelic | Performance monitoring. | Data contained in logs, such as name, email, IP address, userID, user actions taken (e.g., button clicked, username changed, etc.), etc. | United States |
| OneTrust | Data security and privacy GRC, fulfilling DSAR requests, etc. | Only data submitted by clients for data subject requests will be processed by OneTrust | United States |
| Opsgenie | On-call alerting is done using this tool. | Possibly some client / attendee data recorded in an error or other type of communications. | Australia |
| PDFMatrix | Convert html to PDF via their service PDFLayer |
| Bulgaria |
| Salesforce | Client facing ticketing system, receive client support requests and responses. |
| United States |
| Sendgrid | Enable emails to be sent out, on behalf of clients, from the RainFocus Platform. It also enables password resets, MFA, etc. |
| United States |