Legal
      Tilbage til Start
      1. Woba Help Center
      2. Generelt
      3. Legal

      3rd Party Services 01.11.2024

      This page provides information about the sub-processors that Woba has engaged in accordance with its Data Processing Agreement

       

      Last updated: 1 November 2024

      This page provides information about the sub-processors that Woba has engaged in accordance with its Data Processing Agreement to provide processing activities on customer’s personal data on behalf of customers.

      Woba will update this page at least 30 days before engaging a new sub-processor, and if you subscribe for updates, Woba will notify you by email of changes to this page.

      At the commencement of the data processing agreement, the data controller has approved the use of the following sub-processors. Woba utilizes EU-based sub-processors that exclusively process data within the borders of the European Union or sub-processors that have adopted the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

      https://www.dataprivacyframework.gov/s/

      Minimum  sub-processors 

      Company Name

      Address

      Purpose

      Transfer mechanism

      Aiven Oy

      01.03.2018

      Antinkatu 1, 6th floor,

      00100 Helsinki, Finland

      Aiven hosts the data processor's database.

      The company is Finnish, and the data is hosted on servers provided by UpCloud, another Finnish company. It is physically located in Frankfurt, Germany.

      Compliance

      Services are ISO 27000-series, GDPR, CCPA, HIPAA and PCI-DSS compliant. We also provide ISAE 3000/SOC2 Type II reports. 

      Technical feature

      • ISAE 3000, ISO27K, GDPR, CCPA, HIPAA and PCI DSS
      • Automated security update
      • Annual Security Testing

      More information

      Aiven Security

       

      Heroku (a Sales force Company)

      01.06.2018

      The Landmark

      @ 1 Market St.

      Suite 300 San

      Francisco, CA

      94105, USA

      Hosting of the platform (not data)

      The company is American, and the data is located in the "Region: EU" in Frankfurt, Germany. Heroku is hosted by Amazon Web Services in the eu-central-1 region and falls under EU legislation.

      Compliance

      • ISO 27001
      • SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)
      • PCI Level 1
      • FISMA Moderate
      • Sarbanes-Oxley (SOX)

      More information

      Heroku Security 

       

      Active Campaign LLC owner of “Postmark”

      01.06.2018

       

      1 N Dearborn St FL 5 Chicago, Illinois 60602-4349

       

      The company is used as an email service to send out invitations for signing up or logging into Woba. Postmark does not store a complete address book but serves as a relay.

      USA

      Google

      01.04.2016

      1600 Amphitheatre Parkway, Mountain View,

      CA 94043, USA

      The data processor uses Gmail for support or other email communication.

      EU

      Scalingo SAS

      08.12.2024

      13 rue Jacques Peirotes67000 Strasbourg

      France

      SIRET 80866548300018

      Hosting of the platform (not data)

      Scalingo is a French company. Scalingo hosts data in France with partner Outscale which belongs to Dassault Systèmes.

      We are moving from Heroku to Scalingo a 100 % European company

       

      Compliance

      ISO 27001

      HDS Certification

      Security

      Scalingo Security

       

       

      Modular sub-processors 
      Sub-processors may be used by a Customer as part of the Woba Services (if Woba AI is activated by the customer).

      Company Name

      Adresse

      Purpose

      Location
      Open AI  EU

      Processing of data by Azure OpenAI Service (e.g. ChatGPT) in order to provide artificial intelligence capabilities in relation to action- plans, recommendations, and analytics.

      Not applicable for GDPR compliance.

      		 EU SCC