Tidy Technologies Oy ("Tidy", "we", "us") uses certain third-party service providers to provide, operate, secure and support Causalytics.
Where these providers process personal data on behalf of Tidy in connection with the Causalytics service, they act as subprocessors.
This subprocessor list forms part of and is incorporated by reference into the Causalytics Data Processing Agreement ("DPA").
Current subprocessors
Subprocessor | Purpose | Processing location | Safeguard |
|---|---|---|---|
Amazon Web Services (AWS) | Cloud infrastructure, hosting, storage and database services | Ireland, European Union | AWS Data Processing Addendum; Standard Contractual Clauses where applicable |
OpenAI Ireland Ltd. / OpenAI affiliates | AI inference used to generate analyses, insights and recommendations | EEA, United States and other locations used by OpenAI | OpenAI Data Processing Addendum; Standard Contractual Clauses and/or applicable adequacy decision |
Twilio Inc. (SendGrid) | Transactional email delivery | Global, including the United States | Twilio Data Protection Addendum; EU-US Data Privacy Framework and Standard Contractual Clauses where applicable |
Datadog, Inc. | Application monitoring, logging, diagnostics and error analysis | European Union, Germany | Datadog Data Processing Addendum; Standard Contractual Clauses where applicable |
Chatlio LLC | Customer support chat | United States, primarily Ashburn, Virginia | Chatlio Data Processing Addendum; EU-US Data Privacy Framework |
Slack Technologies, LLC / Salesforce affiliates | Customer support communications and handling of support conversations | United States and other locations used by Slack | Slack Data Processing Addendum; EU-US Data Privacy Framework and Standard Contractual Clauses where applicable |
Google LLC / Google Workspace affiliates | Email and customer support communications | Europe for covered data at rest; processing may occur globally | Google Workspace Data Processing Amendment; Standard Contractual Clauses and other applicable transfer mechanisms |
Stripe Payments Europe, Limited / Stripe affiliates | Payment processing and subscription management | EEA, United States and other global locations | Stripe Data Processing Agreement and Data Transfers Addendum; EU-US Data Privacy Framework and Standard Contractual Clauses where applicable |
International data transfers
Some of Tidy's subprocessors process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA to a country that has not been recognised by the European Commission as providing an adequate level of data protection, Tidy requires an appropriate transfer mechanism in accordance with applicable data protection law.
Depending on the provider and destination, these safeguards may include:
an adequacy decision adopted by the European Commission;
the EU-US Data Privacy Framework;
the European Commission's Standard Contractual Clauses; or
another transfer mechanism permitted under Chapter V of the GDPR.
Where appropriate, these mechanisms are supplemented by additional contractual, technical and organisational safeguards.
Changes to subprocessors
Tidy may add, replace or remove subprocessors as the Causalytics service evolves.
Where required under the DPA, Tidy will provide customers with reasonable advance notice before appointing a new subprocessor that will process Customer Data.
Customers may object to the appointment of a new subprocessor on reasonable grounds relating to the protection of personal data, in accordance with the DPA.
If an objection cannot reasonably be resolved, the rights and remedies set out in the DPA will apply.
Provider roles
Some providers listed above may act as a processor for certain processing activities and as an independent controller for other activities.
This page identifies providers to the extent they process personal data on behalf of Tidy in connection with the provision of Causalytics. Processing undertaken by a provider as an independent controller is governed by that provider's own privacy terms and applicable data protection law.
Third parties from which a customer chooses to connect or import data into Causalytics are not necessarily subprocessors of Tidy merely because data originates from their services.
Further information
More information about Tidy's processing of Customer Data, including processing instructions, security obligations, data subject requests, subprocessors, international transfers and deletion of Customer Data, is available in the Causalytics Data Processing Agreement.
For information about how Tidy processes personal data as an independent controller, please see the Causalytics Privacy Policy.
Contact
Questions regarding Tidy's subprocessors or processing of personal data can be sent to:
Tidy Technologies Oy
Business ID: FI27343943
Finland
Email: support@causalytics.ai