ANNEX 2 - Permitted sub-processors

Full name of sub-processor	Purpose of appointment of sub-processor	Establishment of, and locations at which data will be processed by, sub-processor	Adequacy mechanism, if applicable	How is the sub-processing triggered?	Data being processed – ie Client Data Files or User Data
Microsoft Azure	Cloud computing service necessary for the hosting of application services, including data storage.	EU		Automatically on Subscriber’s use of the Software	Client Data Files
MindBridge Analytics Ltd	Provision of customer support, customer success and data ingestion services when necessary.	UK	SCC	Automatically on Subscriber’s use of MindBridge’s customer support services	Client Data Files
MindBridge Analytics Ltd	Provision of customer support, customer success and data ingestion services when necessary.	UK	SCC	Automatically on Subscriber’s use of the Software	User Data
MindBridge Analytics Corporation	Provision of customer support, customer success and data ingestion services when necessary.	USA	SCC	Only used on explicit request of the Subscriber	Client Data Files
Microsoft Azure	Hosting of authentication services, and other application services necessary for provision of Software.	Canada & EU	SCC	Automatically on Subscriber’s use of the Software	User Data
Microsoft Cloud Services	Analytics necessary for provision of software as a service.	Canada	SCC	Automatically on Subscriber’s use of the Software	User Data
ChurnZero	Analytics necessary for provision of software as a service.	USA	SCC	Automatically on Subscriber’s use of the Software	User Data
ZenDesk	Ticketing system necessary for the provision of certain customer support services.	USA	SCC	Automatically on Subscriber’s use of the Software	User Data
Docebo	Learning management system necessary for the provision of certain customer support services.	Canada	SCC	Automatically on Subscriber’s use of the Software	User Data
Atlassian	Development issue tracking system for tracking product issues and feature requests.	USA	SCC	Automatically on Subscriber’s use of the Software	User Data
Pendo	Analytics necessary for provision of software as a service.	EU	SCC	Automatically on Subscriber’s use of the Software	User Data
Microsoft MS365 Services	User data (email/names): calendar invitations, emails, training documentation	USA	SCC	MS 365 / office services only used on explicit request of the Subscriber	User Data
MS Sharepoint	Data transfer provider. Necessary for provision of certain customer support services.	Canada, UK and USA	SCC	MS Onedrive only used on the explicit request of a Subscriber.	Client Data FIles