Each of our Sub-Processors will have an executed DPA to ensure compliance under the EU GDPR requirements. An audited minimum relevant set of data is shared with each vendor. This information is provided in respect of the Data Processing Agreement, which is available for self-execution or consultation here.

If you like te be notified about sub-processor changes you can subscribe to our sub-processor update mailing list.

Company Purpose Entity Location Data Location TOMs Data Categories Duration
Amazon.com, Inc.
  • Storage
  • Application Processing
  • Content Delivery
410 Terry Avenue North, Seattle, WA 98109, USA
  • Germany
  • Ireland
  • Europe
  • Access ccontrol
  • Access control
  • Encryption at rest
  • Encryption in transit
  • Pseudonymisation
  • Recoverability
A02 A03 A04 A05 A06 A07 A08 A09 A10 A11 A13 A14 A15 A16 A17 A18 A19 A20 A21 A22 A23 M02 M03 M04 M05 M07 M08 M09 M10 M11 M12 contract
Salesforce.com, Inc.
  • Application Processing
415 Mission Street, Suite 300, San Francisco, CA 94105, USA
  • Ireland
  • Access control
  • Encryption in transit
A02 A04 A06 A07 A08 A09 A10 A11 A12 A13 A14 A15 A16 A17 A18 A19 A20 A21 A22 A23 M02 M03 M04 M05 M07 M08 M09 M10 M11 M12 N/A
Twilio Inc.
  • Communication Delivery
375 Beale Street, Suite 300 San Francisco, CA 94105
  • Germany
  • Access control
  • Encryption in transit
A11 A18 30 days
CloudFlare, Inc.
  • Content Delivery
101 Townsend St San Francisco, CA 94107
  • Global
  • Access control
  • Encryption in transit
None N/A
TransIP
  • Content Delivery
Vondellaan 47, 2332 AA te Leiden, Netherlands
  • Netherlands
  • Access control
None N/A
Redis Labs, Inc.
  • Storage
700 E El Camino Real Suite 250, Mountain View, CA 94040
  • Ireland
  • Access control
  • Encryption at rest
  • Encryption in transit
  • Recoverability
A01 A03 A10 A11 A12 A24 M01 M02 M07 M13 N/A
Intercom, Inc.
  • Customer Support
55 2nd Street 4th Floor San Francisco, CA 94105
  • United States
  • Access control Encryption at rest Encryption in transit
M02 M03 M04 M05 M06 M07 M08 M10 M11 contract
Inspectlet
  • Customer Support
1135 Scotland Drive, Cupertino, CA 95014
  • United States
  • Access control
  • Encryption at rest
  • Encryption in transit
M02 M03 M04 90 days
N/A

Categories of Personal Data Processed

The Ambassify service processes the following personal data:

Optional Data you as a Data Controller can choose to allow or not by specifying these in our Data Processing Agreement annex 2.
Required Data which is needed for the functionality of the platform.

Ref. Subject Type Data Category* Sub Category Purpose Lawfulness Source
A01 Advocate passwords Internal Authenticating Identification Contractual Necessity User-completed form
A02 Advocate interests
Example: Groups
Internal Preference Segmentation Legitimate Interest User-completed form
A03 Advocate unique identifier
Example: de595e11-8854-4dc2-868d-a69c94501040
External Identifying Identification Contractual Necessity API
A04 Advocate name
Example: John Doe
External Identifying Identification Contractual Necessity User-completed form
A05 Advocate profile picture
Example: http://www.gravatar.com/avatar/?d=mp
External Identifying Identification Contractual Necessity Social Network
A06 Advocate browsing history External Behavioral Measurement Contractual Necessity API
A07 Advocate birth date
Example: 2021-10-30
External Demographic Segmentation Legitimate Interest User-completed form
A08 Advocate languages spoken
Example: NL
External Ethnicity Segmentation Legitimate Interest User-completed form
A09 Advocate gender
Example: Female
External Physical Characteristic Segmentation Legitimate Interest User-completed form
A10 Advocate email Social Communication Contact Contractual Necessity API
A11 Advocate text messages Social Communication Contact Contractual Necessity API
A12 Advocate notifications Social Communication Contact Contractual Necessity API
A13 Advocate employer
Example: ExampleCo
Social Professional Segmentation Legitimate Interest User-completed form
A14 Advocate job titles
Example: Acme Corporation
Social Professional Segmentation Legitimate Interest User-completed form
A15 Advocate social unique identifier
Example: linkedin|5-l9LKSrox
Social Social Network Identification Contractual Necessity API
A16 Advocate connections
Example: 15 (number of connections)
Social Social Network Measurement Legitimate Interest Social Network
A17 Advocate email address Tracking Contact Identification Contractual Necessity User-completed form
A18 Advocate telephone number
Example: +32 12 34 56 78
Tracking Contact Contact Contractual Necessity User-completed form
A19 Advocate physical address
Example: Tervantstraat 2b, 3583 Beringen, Belgium
Tracking Contact Contact Contractual Necessity User-completed form
A20 Advocate IP address
Example: 169.254.12.233
Tracking Computer Device Identification Legitimate Interest API
A21 Advocate browser
Example: Google Chrome 81
Tracking Computer Device Identification Legitimate Interest API
A22 Advocate country
Example: Belgium
Tracking Location Segmentation Legitimate Interest API
A23 Advocate Opt-in
Example: Email, no SMS
Compliance Consent Compliance Subject Consent User-completed form
A24 Advocate access token
Example: Secret to intract with social networks
External Authenticating Identification Contractual Necessity API
M01 Manager passwords Internal Authenticating Identification Contractual Necessity User-completed form
M02 Manager unique identifier
Example: de595e11-8854-4dc2-868d-a69c94501040
External Identifying Identification Contractual Necessity User-completed form
M03 Manager name
Example: John Doe
External Identifying Identification Contractual Necessity User-completed form
M04 Manager browsing history External Behavioral Measurement Contractual Necessity User-completed form
M05 Manager languages spoken
Example: NL
External Ethnicity Segmentation Legitimate Interest User-completed form
M06 Manager chat
Example: Intercom history
Social Communication Contact Contractual Necessity User-completed form
M07 Manager email
Example: E-mails with Ambassify Staff
Social Communication Contact Contractual Necessity User-completed form
M08 Manager email address Tracking Contact Identification Contractual Necessity User-completed form
M09 Manager IP address
Example: 169.254.12.233
Tracking Computer Device Identification Legitimate Interest User-completed form
M10 Manager browser
Example: Google Chrome 81
Tracking Computer Device Identification Legitimate Interest User-completed form
M11 Manager country
Example: Belgium
Tracking Location Segmentation Legitimate Interest User-completed form
M12 Manager Opt-in
Example: Email, no SMS
Compliance Consent Compliance Subject Consent User-completed form
M13 Manager access token
Example: Secret to intract with social networks
External Authenticating Identification Contractual Necessity API