Subprocessors
Last updated: December 1, 2023
SOCi uses certain subprocessors (“Subprocessors”) to assist in providing limited services on its behalf.
SOCi’s Subprocessors provide infrastructure, data storage, system logging services, and other tools that facilitate the delivery of the Services including customer support and email communications. These Sub-processors may be provided access to Covered Personal Information; however, only to the extent necessary to support the Services.
As part of SOCi’s commitment to keep Covered Personal Information secure, SOCi evaluates Sub-processors’ privacy and security practices prior to engaging them. SOCi also requires Sub-processors to enter into data processing agreements that protect Covered Personal Information and incorporates data protection obligations consistent with applicable Privacy Laws.
In the event SOCi removes or adds new Sub-processors, SOCi will post updates at https://www.meetsoci.com/subprocessors at least thirty (30) days prior to adding or removing a Sub-processor. For questions about SOCi’s Sub-processors, please reach out to [email protected]. Customer may subscribe to receive regular updates as to SOCi’s Sub-processors at https://www.meetsoci.com/signup-subprocessors.
To receive notice of any new Sub-processor to this list, you can subscribe here.
Sub-processor | Purposes of sub-processing | Geographical Location | Subprocessor security website links |
---|---|---|---|
Amazon Web Services, Inc | AWS Hosting of SOCi Platform | USA | https://aws.amazon.com/s3/security/ https://aws.amazon.com/security/ https://aws.amazon.com/compliance/data-center/controls/ |
Amazon Web Services, Inc | Content delivery network (CDN) used by SOCi to optimize content delivery. | Based on Customer’s User Locations | https://aws.amazon.com/s3/security/ https://aws.amazon.com/security/ https://aws.amazon.com/compliance/data-center/controls/ |
Google Cloud Services | GC Hosting of SOCi Platform and Ignite/B1 Platforms | USA | https://cloud.google.com/security |
Google Cloud Services | Content delivery network (CDN) used by SOCi to optimize content delivery. |
Based on Customer’s User/Locations | https://cloud.google.com/security |
Microsoft Corporation | Microsoft Hosting of Ignite/B! Platforms | USA | https://www.microsoft.com/licensing/terms/product/PrivacyandSecurityTerms/all |
Salesforce | Internal Customer Relationship Management Platform | USA | https://security.salesforce.com/ |
Twilio, Inc (dba Sendgrid) | Cloud Service Provider – In-App Email Delivery | USA | https://sendgrid.com/policies/security/ |
Bandwidth | SMS Messaging API for SOCi’s Survey Product | USA | https://www.bandwidth.com/security/ |
Pendo.io | Email Marketing | USA | https://security.salesforce.com/ |
Zendesk | Trouble Ticket System and Solution Articles Guide | USA | https://support.zendesk.com/hc/en-us/articles/360036130213-Zendesk-s-secure-by-design-cloud-solution |
Gainsight | Internal Customer Relationship Management Platform | USA | https://www.gainsight.com/security/ |
Atlassian/Jira | Internal Project Management Platform | USA EU |
https://www.atlassian.com/trust/compliance/resources/gdpr https://www.atlassian.com/trust/security |
Cloudflare, Inc. | Content delivery network used by SOCi to optimize content delivery. | Global Based on Customer’s user/location countries |
https://www.cloudflare.com/trust-hub/compliance-resources/ |
New Relic, Inc. | Application performance monitoring, infrastructure and network monitoring, and error capturing. SOCi may provide End User or dashboard Customer metadata, such as user identifiers, to New Relic for support and application troubleshooting and to improve performance of the SOCi Services. | USA | https://docs.newrelic.com/docs/security/overview/ |
Elasticsearch Inc. | Elastic Cloud SaaS product used for data storage and querying. Managed Elastic Search hosting. Support services, including performance of diagnostic measures and troubleshooting | USA EU |
https://www.elastic.co/security-and-compliance |
SOCi is a U.S.-based company with engineering and customer success teams. We primarily store Customer information in the United States. To facilitate our global operations, SOCi may transfer such information to, and access it from, other countries (showing in the table below) for the purposes described in this Addendum and/or the Agreement. Whenever SOCi transfers Customer Covered Personal Information originating in the EEA, the UK, or Switzerland with a Sub-Processor or subcontractor outside the EEA, the UK, or Switzerland, SOCi implements appropriate safeguards, consistent with the applicable Privacy Laws of the territory from which the Covered Personal Information is exported. For example, where transfers are made from the EEA, SOCi relies on the EU standard contractual clauses, including supplementary measures as necessary.
Countries | Recipient | Compliance mechanism* |
---|---|---|
United States | SOCi | Standard Contractual Clauses |
Canada, Australia, Brazil, Mexico, Argentina, Poland, Turkey, Pakistan, Ukraine, Ghana, Lebanon, Nigeria, India, Jordan, Gambia, North Macedonia, Egypt, Kenya EU Countries include: Estonia, Finland, France, Spain, Poland, Croatia, Czech Republic, Lithuania. |
SOCi Engineering, Developer Support (hired via Deel, Inc) | Standard Contractual Clauses |
Philippines | SOCi Customer Success team (hired via KMC Solutions) |
Cookie Settings Terms of Service Privacy Notice Information Security Accessibility Statement Contact Your Privacy Choices
This site uses chatbots to record your interactions on our site for our consent recordkeeping and provide customer support. Our technology provider may also collect and aggregate this data on our site for their purposes. See our Privacy Notice to learn more about our privacy practices.