Data subprocessors

Last updated: 12 December 2019

Introduction permalink

This is a list of the subprocessors we use to help deliver our service.

Progression (app.progressionapp.com) permalink

Heroku

  • Location: San Francisco, United States
  • Data security certifications: Privacy Shield, ISO27001, 27017, 27018 SOC2 Type 1
  • Data processed: Anonymised content, email address, IP address.
  • Use: Cloud server hosting.
  • DPA signed: Yes, included with standard terms.

Amazon Web Services

  • Location: Seattle, United States
  • Data security certifications: Privacy Shield, ISO27001, SOC3
  • Data processed: Database backups, uploaded images and files.
  • Use: Database backups, CDN.
  • DPA signed: Yes, included with standard terms.

Full Story

  • Location: Atlanta, United States
  • Data security certifications: SOC2 Type 2
  • Data processed: Session activity.
  • Use: User experience improvements.
  • DPA signed: Yes.

Stripe

  • Location: San Francisco, United States
  • Data security certifications: PCI
  • Data processed: Billing contact name, email, address, card details.
  • Use: Payment processing.
  • DPA signed: Pending.

Chargebee

  • Location: Walnut, United States
  • Data security certifications: EU-U.S. Privacy Shield, PCI Level 1, SOC 2 Type 2, ISO 27001
  • Data processed: Billing contact name, email, address, card details.
  • Use: Subscription management.
  • DPA signed: Pending.

Helpscout

  • Location: Boston, United States
  • Data security certifications: PCI Level 1, EU-U.S. Privacy Shield
  • Data processed: Name, email, company, position .
  • Use: Real time support, help docs.
  • DPA signed: Pending.

Newrelic

  • Location: San Francisco, United States
  • Data security certifications: SOC 2 Type 2, CSA STAR, EU-U.S. Privacy Shield
  • Data processed: Aggregate application metrics.
  • Use: Code performance monitoring.
  • DPA signed: Pending.

MooSend

  • Location: London, United Kingdom
  • Data security certifications: ISO 27001
  • Data processed: Name, email, company, position.
  • Use: Product update emails.
  • DPA signed: No.

Google Analytics

  • Location: Mountain View, United States
  • Data security certifications: ISO 27001, EU-U.S. Privacy Shield
  • Data processed: Product use data, IP addresses.
  • Use: Measuring product usage and effectiveness.
  • DPA signed: Yes.

Progression Marketing website (www.progressionapp.com) permalink

Google Analytics

  • Location: Mountain View, United States
  • Data security certifications: ISO 27001, ISO 27017, ISO 27018, and SOC 2/3, EU-U.S. Privacy Shield
  • Data processed: Website usage, IP addresses.
  • Use: Measuring website usage and effectiveness.
  • DPA signed: Yes.

Helpscout

  • Location: Boston, United States.
  • Data security certifications: PCI Level 1, EU-U.S. Privacy Shield
  • Data processed: IP address.
  • Use: Real time support, help docs.
  • DPA signed: Pending.

Mailjet

  • Location: Paris, France
  • Data security certifications: ISO 27001
  • Data processed: Email, name, company, role.
  • Use: Waitlist update emails.
  • DPA signed: Pending.

Google Docs

  • Location: Mountain View, United States
  • Data security certifications: ISO 27001, ISO 27017, ISO 27018, and SOC 2/3, EU-U.S. Privacy Shield
  • Data processed: Email, name, company, role.
  • Use: Managing waitlist.
  • DPA signed: Yes.

Woodpecker

  • Location: Wroclaw, Poland
  • Data security certifications: Pending ISO 27001.
  • Data processed: Email, name, company, role.
  • Use: Waitlist emails.
  • DPA signed: Pending.