...
Supplier | Purpose for the Processing or Storage | Which Data? | When? | Where? | Important Notes |
|---|---|---|---|---|---|
Amazon AWS | Hosting Logs (S3 Global, CloudFront) |
| When you use our Cloud applications | Global (Data stored in region of user) | We transfer information. Relevant documents |
Storage for configurations required for operation of applications or features. |
| Depending on configurations required for providing functionality. For example in ActionableAgile: We store Jira Account IDs for users who own and can access shared data sets. | EU (Stockholm) Options for those eligible for data residency:
| We transfer information. Relevant documents | |
MixPanel (HQ: USA) | Product Usage Analytics |
| When you use our Cloud applications (not relevant for Server or Data Center Customers) | EU | We transfer information. Relevant documents |
Product Fruits (HQ: Czech Republic) | In-App User Help and Messaging (General and Context-Specific) Measuring usefulness of in-app user help and messaging. |
| When you use our Cloud applications | EU | We transfer information. Relevant documents |
Sentry (HQ: USA) | Error logging and handling |
| When you experience a javascript error while using one of our Cloud applications | USA | We transfer information. Relevant documents |
...
Supplier | Purpose for the Processing or Storage | Which Data? | When? | Where? | Important Notes |
|---|---|---|---|---|---|
Amazon AWS | Hosting Logs (S3 Global, CloudFront) |
| When you use our Cloud applications | Global (Data stored in region local to the user) | We transfer information. Relevant documents |
Authorization for OAuth connections to work management systems like Jira Cloud |
| When you use an OAuth based wizard to connect to your work management system | EU (Frankfurt) | ||
Authorization for our embedded Azure app. (processing data currently stored in Firestore Database) |
| When you access ActionableAgile within your Azure DevOps Services instance we look for your ID in our Azure subscription files to see if you are listed as a user in a valid subscription. | EU (Frankfurt) Google Cloud (Firebase) | ||
Storage for configurations required for operation of applications or features. |
| Depending on configurations required for providing functionality. | EU (Stockholm) | ||
Google Cloud (Firebase) | Firestore Database |
This is anonymous for managed users in a subscription as we have no way to lookup the personal data associated with the Azure ID. For the subscriber it is psuedonymized. We can connect this information to a subscriber email in Recurly. | When you access ActionableAgile within your Azure DevOps Services instance. | EU | We transfer information. Relevant documents |
Google Cloud (Firebase) | Firestore Database Authentication (Firebase Authentication) Authorisation (Firebase Functions) |
| When you log into ActionableAgile Analytics (https://analytics.actionableagile.com) | EU | We transfer information. Relevant Documents |
MixPanel (HQ: USA) | Product Usage Analytics |
| When you use ActionableAgile Standalone or ActionableAgile for Azure DevOps Services | EU | We transfer information. Relevant documents |
Product Fruits (HQ: Czech Republic) | In-App User Help and Messaging (General and Context-Specific) Measuring usefulness of in-app user help and messaging. |
| When you use our Cloud applications | EU | We transfer information. Relevant documents |
Recurly (HQ: USA) | Subscription Management, including selected Transactional Emails |
| When you start, update, or cancel an evaluation or paid subscription for ActionableAgile Analytics (https://analytics.actionableagile.com ) or ActionableAgile for Azure DevOps. | USA | Technically, we don’t transfer your information. We use hosted account management pages and forms used in our app are hosted forms. So, you’re entering information directly into our subprocessor and we don’t handle the transfer. Relevant Documents: |
Sentry (HQ: USA) | Error logging and handling |
| When you experience a javascript error while using one of our Cloud applications | USA | We transfer information. Relevant documents |
...
Supplier | Purpose for the Processing or Storage | Which Data? | When? | Where? | Important Notes | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Automation Consultants (UK) | Share information about you and your participation in a workshop when they perform a workshop for us so they can:
|
| Following registration for a workshop. | UK | We send this information to the sub-processor via email. Relevant documents: | ||||||||||||
Google Ireland (Google Workspace, including Email) | Customer Email Communication |
| When you email us. | All data is stored at rest in Europe. | Technically, we don’t transfer your information. Your emails go directly to this sub-processor. Relevant documents | ||||||||||||
Microsoft (Teams, OneDrive) | Video Meetings and Recording storage |
| When you register for or attend, a meeting hosted on the service. | EU | Technically, we don’t transfer your information. You either enter information directly into this subprocessor or another subprocessor (Google Workspace) transfers the data to Teams. Relevant documents | ||||||||||||
Mighty Networks (HQ: USA) DPA | Remove your data | Privacy Policy | EU/EEA/UK Privacy Notice | Cookie Policy | Community Platform Provider (SaaS) |
| When you use our community platform to interact with others in a space dedicated to the training or workshop you’re enrolled in. | USA | Technically, we don’t transfer your information. You interact directly with this subprocessor when using our community site. 55 Degrees has limited access to some of the automatically collected information in the form of analytics known as Mighty Insights. Mighty Networks will display a cookie banner for their own purposes and links directly to their cookie policy. | ||||||||||||
Mural (HQ: USA) | Collaboration / Digital Whiteboarding Platform (SaaS) |
| When you join a mural you can join anonymously or as a guest. If you join as a guest, which gives you additional privileges then you need to provide contact information. When you use Mural, the subprocessor collects information noted in their privacy policy. When you interact in a Mural, you control the content that you add to the workspace. | US | Technically, we don’t transfer your information. You enter information directly into this subprocessor. Relevant documents | ||||||||||||
Training curriculum provider and certification body |
| When we send a list of candidates that are available for a free certification exam. | USA | We transfer information. Relevant documents | |||||||||||||
Quaderno (HQ: Spain) | SaaS VAT/Tax Compliance Service |
| When you use a credit card to pay for training or workshop and are subject to VAT. | EU (Amsterdam) via Digital Ocean’s data center | Technically, we don’t transfer your information. Our Credit Card payment processing platform subprocessor communicates directly with Quaderno to handle tax calculations. Relevant documents | ||||||||||||
Stripe (HQ: USA) | Credit card payment processing |
| When you pay by credit card for any training or workshop, whether live or on-demand in the community. | USA | Do we technically transfer your data? If purchased through community site: No. Mighty Networks handles this. If you receive an invoice from us (not self-service): Yes. Relevant documents | ||||||||||||
Zoom (HQ: USA) | Video Meetings and Recording storage |
| When you register for or attend, a meeting hosted on the service. | USA (data at rest) EU (data in transit) | Technically, we don’t transfer your information. You either enter information directly into this subprocessor or another subprocessor (Google Workspace, Mighty Networks) transfers the data to Zoom. Relevant documents |
...
| Expand | ||
|---|---|---|
| ||
October 23, 2024: Adding information about AWS Data Residency for Jira Cloud, Adding information about storage for features in Azure. October 14, 2024: Adding Automation Consultants as a training partner who will deliver some of our customer workshops. September 2, 2024: Adding startdeliver CSM tool which will replace planhat over the next few months. Removed all references to Google Firebase Functions in the US for Azure users. July 19, 2024: Removed Scrum.org as a sub-processor, added additional data to Product Fruits sub-processor (marked NEW), noted the planned replacement of Google firebase functions in US with AWS in EU for Azure users starting September 1, removed references to standalone labs as that has been decommissioned.. April 15, 2024: Removed Calendly as a sub-processor, Added Product Fruits for our Cloud products. October 10, 2023: Removed Pipedrive as a sub-processor. June 30, 2023: Updated Data Storage and Processing region for our support portal supplier, Refined, as we migrated our data to EU now that that is an option. June 8, 2023: Added information about Mighty Networks, Added WIX and Wordpress/Automattic, reordered suppliers in alphabetical order within each section. May 15, 2023: Fixed links for AWS March 29 - 31, 2023:
March 14, 2023:
March 3, 2023: Added suppliers for our training and workshop business. February 17, 2023: Added Planhat as a vendor. This vendor will end up replacing Pipedrive for customer success operations. November 21 & 22, 2022: Change to the format of tabular information in order to provide clarity in regards to who actually transfers data (if a transfer occurs) and when you are directly interacting with a sub-processor. This should add clarity as to why we rely on our sub-processor’s SCCs and addendums and do not require any in our DPA as of this time. Updated Google Ireland (Google Workspace) to show that we are processing/storing data in EU. . |