This page provides information about the sub-processors that Woba has engaged in accordance with its Data Processing Agreement
Last updated: 1 November 2023
This page provides information about the sub-processors that Woba has engaged in accordance with its Data Processing Agreement to provide processing activities on customer’s personal data on behalf of customers.
Woba will update this page at least 30 days before engaging a new sub-processor, and if you subscribe for updates, Woba will notify you by email of changes to this page.
At the commencement of the data processing agreement, the data controller has approved the use of the following sub-processors. Woba utilizes EU-based sub-processors that exclusively process data within the borders of the European Union or sub-processors that have adopted the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
https://www.dataprivacyframework.gov/s/
|
Company Name |
Address |
Purpose |
Transfer mechanism |
|
Aiven Oy |
Helsinki, Finland |
Aiven hosts the data processor's database. |
The company is Finnish, and the data is hosted on servers provided by UpCloud, another Finnish company, and is physically located in Frankfurt, Germany. |
|
Heroku (a Sales force Company) |
The Landmark @ 1 Market St. Suite 300 San Francisco, CA 94105, USA |
Hosting of the platform (not data) |
The company is American, and the data is located in the "Region: EU" in Frankfurt, Germany. Heroku is hosted by Amazon Web Services in the eu-central-1 region and falls under EU legislation. |
|
Active Campaign LLC owner of “Postmark” |
1 N Dearborn St FL 5 Chicago, Illinois 60602-4349
|
The company is used as an email service to send out invitations for signing up or logging into Woba. Postmark does not store a complete address book but serves as a relay. |
USA |
|
|
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA |
The data processor uses Gmail for support or other email communication. |
EU |
Modular sub-processors Woba Copilot
Sub-processors may be used by a Customer as part of the Woba Services (if Woba Copilot is activated by the customer).
|
Company Name |
Adresse |
Purpose |
Location |
| OpenAI Ireland | EU |
Processing of data by Azure OpenAI Service (e.g. ChatGPT) in order to provide artificial intelligence capabilities in relation to action plan analytics. *Not applicable for GDPR compliance. |
EU SCC |