Menu

Last modified at: Wed May 31 2023

Subprocessors

To support the delivery of our Services, Appfarm AS may engage and use data processors with access to certain Customer Data (each, a "Subprocessor"). This page provides vital information about the identity, location, and role of each Subprocessor. Terms used on this page but not defined have the meaning outlined in the Software Service Agreement or superseding written agreements between Customer and Appfarm.

Third-Party Sub-Processors for the Appfarm Platform (the "Service") processing Customer Personal Data

Appfarm and its affiliates engage the following third-party entities to assist in connection with the Service as specified below:

Entity NameService Location (area where processing is performed) Registered address Country of registrationServiceTask performedGDPR ComplianceSchrems IILink to DPAType of data storedStorage period
Google Cloud EMEA LimitedBelgiumGordon House, Barrow Street, Dublin 4IrelandGoogle Cloud PlatformCloud infrastructure for servers and databasesLinkLinkLinkUser IP-address and email address*
Amazon Web Services EMEA SARLSweden38 avenue John F. Kennedy, L-1855 Luxembourg, R.C.S. Luxemburg: B186284LuxembourgAmazon Web ServicesCloud infrastructure for servers and databases. Email.LinkLinkLinkUser IP-address and email address*
MongoDB LimitedBelgium3 Shelbourne Building, 3rd Floor, Crampton Avenue, Ballsbridge, Dublin 4IrelandMongoDB CloudDatabase servicesLinkLinkLinkUser’s given name, surname, email address, company name, all data stored through Appfarm Create and the applications created on the platform*
OnlineCity ApSEU/EEABuchwaldsgade 50, 5000 Odense CDenmarkGateway APISMS ServicesLinkLinkLinkPhone number, internal Appfarm identifierDeleted after 30 days
Mailgun Technologies, Inc.EU/EEA548 Market Street, Suite 43099, San Francisco, CA 94101USAE-mailE-mail servicesLinkLinkLinkEmail addressDeleted after 30 days
Functional Software, Inc.USA132 Hawthorne Street, San Francisco, CA 94107USASentryAutomated error reporting for platform usersLinkLinkLinkIP address, browser information (User Agent string), internal Appfarm identifier and crash logs. End-users.Deleted after 90 days
Report-URI Ltd.Norway/***22 Shireburn Avenue, Clitheroe, Lancashire, United Kingdom, BB7 2PNEngland and WalesReport URIAutomated Content Security Policy anomaly reporting for Appfarm Create users (Not clients)LinkLinkLinkIP address, URL of Appfarm solution, Browser information (User Agent string)Deleted after 30 days

* Customer data is continuously stored (and backed up) as long as the customer has an active Appfarm subscription. Customer data is stored up to 1 year after a subscription is canceled (if not otherwise instructed by the Customer) to facilitate Customer's data transfer procedures

** Data is stored in accordance with Appfarm’s Privacy statement at https://appfarm.io/terms/privacy/

*** Data is sent to the closest Cloudflare edge node to the user. For users in Norway, this is Oslo, in other countries most likely country of origin.

Third-Party Sub-Processors not connected to the Appfarm Platform (the "Service")


Appfarm and its affiliates engage the following third-party entities to assist in delivering services to Appfarm Customers, but not connected to the Appfarm Platform. Hence, these Third-Party Sub-Processors do not process or store personal data related to Appfarm Customers’ use of the Appfarm Platform and the Service. These Third-Party Sub-Processes are used for auxiliary business activities such as customer relationship management, communication, project management, and other purposes where Appfarm have a legitimate interest to operate. For further information, please see Appfarm’s Privacy Policy.

CompanyService Location (area where processing is performed) Registered address Country of registrationServiceTask performedGDPR Compliance Schrems IILink to DPAType of data storedStorage period
Slack Technologies, Inc.USA500 Howard Street, San Francisco, California 94105USASlackInstant messaging servicesLinkLinkLinkName and surname, company name, email address, phone numberDeleted after 90 days
HubSpot, Inc.EU/EEA25 First Street, 2nd Floor, Cambridge, MA 02141USAHubSpotSales, marketing, and customer relationship management activitiesLinkLinkLinkCompany name, given name, surname, email address, phone number, emails**
Google Cloud EMEA LimitedEU/EEAGordon House, Barrow Street, Dublin 4 IrelandEU/EEAGoogle WorkspaceCloud computing, productivity and collaboration toolsLinkLinkLinkName and surname, company name, email address, phone number**
EdInvent, Inc.USA800 W El Camino Real, Suite 180, Mountain View, California 94040, USAUSAAccredibleDigital badge, certificate, and credential platformLinkLinkLinkGiven name, surname, email address**
Induslynk Training Services Pvt Ltd.EU/EEAGood Earth Business Bay, 7th & 8th Floor, Sector 58, Gurugram, Haryana, 122011, IndiaUSA/IndiaMercer MettlOnline examination and proctoring platformLinkLinkGiven name, surname, email address, birthdate, phone number, country of login, face image, image of valid ID, test results, webcam and screen recording during certification exams.Examdata older than three months is deleted every three months
Contractbook ApSEU/EEAMasnedøgade 22, st, 2100 CopenhagenDenmarkContractbookContract management platformLinkLinkLinkGiven name, surname, company name, address, email address, location**
Notion Labs, Inc.USA548 Market St #74567, San FranciscoUSANotionInternal workspace and project management applicationLinkLinkLinkCustomer name, partner name, email address, given name, surname and phone number**
Webflow, IncUSA398 11th Street, Floor 2, San Francisco, CA 94103USAWebflowWebsite building and hostingLinkLinkLinkCustomer name, customer logo, given name, surname**
Civilized Discourse Construction Kit, Inc.EU/EEA8 The Green Suite #8383, Dover, DE, 19901USADiscourseDiscussion forum platformLinkLinkLinkGiven name, surname, email address. **
Docspring, Inc.EU/EEA2035 Sunset Lake Road, Suite B-2, Newark, Delaware 19702USADocspringPDF-generator API serviceLinkLinkDPA pendingAppfarm client specific PDF-dataData is deleted after 7 days
Teamtailor ABEU/EEAÖstgötagatan 16, 116 21 StockholmSwedenTeamtailorApplicant tracking software (ATS)LinkLinkLinkGiven name, surname, phone number, CV, grades, references, messages, emails, reason for application response, interview notesData is deleted after 30 days

* Customer data is continuously stored (and backed up) as long as the customer has an active Appfarm subscription. Customer data is stored up to 1 year after a subscription is canceled (if not otherwise instructed by the Customer) to facilitate Customer's data transfer procedures

** Data is stored in accordance with Appfarm’s Privacy statement at https://appfarm.io/terms/privacy/

Appfarm may also use other third-party service providers to process personal data from individuals, interacting with Appfarm outside the use of the Service, if it is necessary to provide you with a contractual service (GDPR art. 6.1 b), if we are required by law, court orders or legal processes to disclose your personal data (GDPR art. 6.1 c), or it can be justified based on our legitimate interest in doing so (GDPR art. 6.1 f). Examples of this would be cloud-based email, accounting, and CRM systems. Please see Appfarm's privacy policy for more information.

Updates

As our business grows and evolves, the Sub-processors we engage may also change. We will endeavor to provide the owner of the Customer's account with notice of any new Sub-processors to the extent required under the Agreement, along with posting such updates here. Please check back frequently for updates.

23/1/2: Removal of Atlassian, Inc. as sub-processors

Appfarm has discontinued use of Atlassian Inc. and their service Trello.

22/12/13: Addition of new sub-processors

Appfarm has added new sub-processors in order to provide our existing and prospective customers, users, and partners an improved and more comprehensive product offering:

  • Notion Labs, Inc. (with its service Notion): Internal communication tool, process management, and project management system.
  • Contractbook ApS (with its service Contractbook): Contract management platform
  • Webflow, Inc. (with its service Webflow): Website services
  • Civilized Discourse Construction Kit, Inc. (with its service Discourse): Community and forum platform used to organize engagement and processes
  • Docspring, Inc. (with its service Docspring):  PDF template management and API service
  • Teamtailor AB (with its service Teamtailor): Applicant tracking system

None of these new sub-processors are directly connected to the Service, but offer services Appfarm use for auxiliary business activities, of which some customer data may be processed.

22/11/29: Freshworks, Inc. has been removed as subprocessor

Appfarm has, as of today, discontinued Freshworks, Inc. and its service Freshworks as a sub-processor.

22/4/25: Added EdInvent, Inc. and Induslynk Training Services Pvt Ltd as new processors

Appfarm has, as of today, added EdInvent, Inc. and Induslynk Training Services Pvt Ltd as new sub-processors. Both vendors are used in relation to our certification program, and is not connected to the Appfarm Platform (“the Service”).


22/4/20: Added Hubspot as a subprocessor

Appfarm has, as of today, added HubSpot, Inc. as a new sub-processor. Hubspot is used as a customer relationship management (CRM) system and is not connected to the Appfarm Platform (“the Service”). HubSpot offers regional data hosting, and all data is located in HubSpot’s product infrastructure hosted on Amazon Web Services (AWS) in Germany.

21/8/17: Added AWS as a subprocessor

Appfarm has, as of today, added Amazon Web Services (AWS) as a new sub-processor for the Appfarm Platform (the "Service") processing Customer Personal Data. The current use of AWS in the Appfarm Platform will be restricted to the use of the Amazon Simple Email Service (SES). Other AWS services may be used at a later time.

The reason for the change is that several Appfarm customers have at times experienced poor delivery times with the internal Appfarm email service, which, among others, is used for delivery of PIN-codes for user authentication purposes. The Appfarm engineering team has concluded that the current vendor and sub-processor (Mailgun Technologies) should be replaced with a more reliable service to secure the highest service quality of the Appfarm platform.

All Appfarm customers have been notified of the change. In line with the Appfarm Data Processing Agreement (section 7.2), the new sub-processor will not take effect and become active in use in the Appfarm platform until 30 days (September 17th, 2021), if not otherwise instructed by Appfarm customers.

21/1/29: International Data Transfers

Although, in the light of European Court of Justice decision C-311/18 (Schrems-II) in which Privacy Shield as grounds for data transfers to third countries was invalidated, Appfarm is still ensuring that its Third-Party Sub-Processors are compliant with the GDPR framework, either by implementing Standard Contractual Clauses ensuring the same level of protection for its users or similar grounds accepted by the EDPB. This includes, but is not limited to, already existing service providers and service providers in the future.

GET IN TOUCH

Got a project, idea, or questions?
Get in touch.

backgroundappfarm logo