55 Degrees uses the third-party companies below (each, a “sub-processor”) to process data, sometimes personal data (i) on behalf of 55 Degrees' customers; (ii) in accordance with customer instructions as communicated by 55 Degrees; and (iii) in strict accordance with the terms of a written contract, if one exists, between 55 Degrees and the sub-processor. If we use additional sub-processors to deliver our service but don't send personal or user-generated data (aka. customer data) to them for processing, they will not be listed in this document. The supplier (e.g., vendors or sub-processors) relevant to you will depend on your interactions with 55 Degrees.
55 Degrees thoroughly reviews its sub-processors regularly to check that it is up-to-date and that vendors implement appropriate technical and organizational measures ensuring that the sub-processing of personal data is protected to the standards required by applicable data protection laws. Further information on sub-processor security measures can be found via the external links below. 55 Degrees customers may subscribe to notifications of sub-processor changes to receive updates.
For each sub-processor below, processing of personal data will be for the duration that the customer uses and continues to use the applicable service(s) and for the retention periods as set out in our privacy policy and customer agreements. Please note that not all suppliers listed will be relevant to your usage of our tools and services. Therefore we have created sections that should help you clearly identify which suppliers are relevant for you. You can use the links below to navigate directly to relevant sections.
Jump to the list of sub-processors or suppliers relevant to:
General Communication and Subscription Management
Supplier | Purpose for the Processing or Storage | Which Data? | When? | Where? | Important Notes |
|---|---|---|---|---|---|
Brevo (was SendinBlue) | Marketing Emails |
| When you subscribe to our mailing lists | EU | Technically, we don’t transfer your information. We embed or use pages or forms hosted by Brevo. Relevant documents |
Google Ireland (Google Workspace, including Email) | Customer Email Communication |
| When you email us. | All data is stored at rest in Europe. What data is covered by a data region policy?
| Technically, we don’t transfer your information. Your emails go directly to this sub-processor. Relevant Documents: |
Microsoft (Teams, OneDrive) | Video Meetings and Recording storage |
| When you register for or attend, a meeting hosted on the service. | EU | Technically, we don’t transfer your information. You either enter information directly into this subprocessor or another subprocessor (Google Workspace) transfers the data to Teams. |
Planhat AB OUTGOING (HQ: Sweden) | Customer Success Platform |
| When your information is provided to us as a key contact for a new or existing subscription or evaluation. When you communicate/interact with us regarding your organization’s subscription or evaluation. | EU | We transfer information. Relevant documents |
Startdeliver AB NEW (HQ: Sweden) DPA upon request | Customer Success Platform |
| When your information is provided to us as a key contact for a new or existing subscription or evaluation. When you communicate/interact with us regarding your organization’s subscription or evaluation. | EU | We transfer information. Relevant documents |
Stripe (HQ: USA) | Credit card payment processing |
| Upon purchase or renewal of a paid subscription for ActionableAgile Analytics (https://analytics.actionableagile.com ) or ActionableAgile for Azure DevOps. | USA | Technically, we don’t transfer your information. Our Subscription Management subprocessor, Recurly, communicates directly with Stripe for credit card payment processing. Relevant documents |
Visma Spcs AB (HQ: Sweden) | Quoting and Invoicing for customers paying by wire transfer |
| When you request a quote or an invoice for products or services sold directly from 55 Degrees. | EU | We transfer information. Relevant documents |
WIX (HQ: Israel) | Website Creation and Hosting Provider |
| When you visit our website at https://55degrees.se | USA, EU, Japan, Israel (depending on what the information is and if WIX is using a subprocessor). | Relevant documents
|
Wordpress by Automattic (HQ: USA) DPA upon request | Website Creation and Hosting Provider. Services used:
|
| When you visit our website at https://actionableagile.com | USA | Technically, we don’t transfer your information. Our site is run by Automattic on wordpress.com and they collect information directly to run and manage the service. Relevant documents
|
Zoom (HQ: USA) | Video Meetings and Recording storage |
| When you register for or attend, a meeting hosted on the service. | USA (data at rest) EU (data in transit) | Technically, we don’t transfer your information. You either enter information directly into this subprocessor or another subprocessor (Google Workspace, Mighty Networks) transfers the data to Zoom. |
Our Jira Cloud Applications
Supplier | Purpose for the Processing or Storage | Which Data? | When? | Where? | Important Notes |
|---|---|---|---|---|---|
Amazon AWS | Hosting Logs (S3 Global, CloudFront) |
| When you use our Cloud applications | Global (Data stored in region of user) | We transfer information. Relevant documents |
Storage for configurations required for operation of applications or features. |
| Depending on configurations required for providing functionality. For example in ActionableAgile: We store Jira Account IDs for users who own and can access shared data sets. | EU | We transfer information. Relevant documents | |
MixPanel (HQ: USA) | Product Usage Analytics |
| When you use our Cloud applications (not relevant for Server or Data Center Customers) | EU | We transfer information. Relevant documents |
Product Fruits (HQ: Czech Republic) | In-App User Help and Messaging (General and Context-Specific) Measuring usefulness of in-app user help and messaging. |
| When you use our Cloud applications | EU | We transfer information. Relevant documents |
Sentry (HQ: USA) | Error logging and handling |
| When you experience a javascript error while using one of our Cloud applications | USA | We transfer information. Relevant documents |
Our Azure Cloud and Standalone SaaS Applications
Supplier | Purpose for the Processing or Storage | Which Data? | When? | Where? | Important Notes |
|---|---|---|---|---|---|
Amazon AWS | Hosting Logs (S3 Global, CloudFront) |
| When you use our Cloud applications | Global (Data stored in region local to the user) | We transfer information. Relevant documents |
Authorization for OAuth connections to work management systems like Jira Cloud |
| When you use an OAuth based wizard to connect to your work management system | EU (Frankfurt) | ||
Authorization for our embedded Azure app. (processing data currently stored in Firestore Database) |
| When you access ActionableAgile within your Azure DevOps Services instance we look for your ID in our Azure subscription files to see if you are listed as a user in a valid subscription. | EU (Frankfurt) | ||
Google Cloud (Firebase) | Firestore Database |
This is anonymous for managed users in a subscription as we have no way to lookup the personal data associated with the Azure ID. For the subscriber it is psuedonymized. We can connect this information to a subscriber email in Recurly. | When you access ActionableAgile within your Azure DevOps Services instance. | EU | We transfer information. Relevant documents |
Google Cloud (Firebase) | Firestore Database Authentication (Firebase Authentication) Authorisation (Firebase Functions) |
| When you log into ActionableAgile Analytics (https://analytics.actionableagile.com) | EU | We transfer information. Relevant Documents |
MixPanel (HQ: USA) | Product Usage Analytics |
| When you use ActionableAgile Standalone or ActionableAgile for Azure DevOps Services | EU | We transfer information. Relevant documents |
Product Fruits (HQ: Czech Republic) | In-App User Help and Messaging (General and Context-Specific) Measuring usefulness of in-app user help and messaging. |
| When you use our Cloud applications | EU | We transfer information. Relevant documents |
Recurly (HQ: USA) | Subscription Management, including selected Transactional Emails |
| When you start, update, or cancel an evaluation or paid subscription for ActionableAgile Analytics (https://analytics.actionableagile.com ) or ActionableAgile for Azure DevOps. | USA | Technically, we don’t transfer your information. We use hosted account management pages and forms used in our app are hosted forms. So, you’re entering information directly into our subprocessor and we don’t handle the transfer. Relevant Documents: |
Sentry (HQ: USA) | Error logging and handling |
| When you experience a javascript error while using one of our Cloud applications | USA | We transfer information. Relevant documents |
Our Support Portal
Supplier | Purpose for the Processing or Storage | Which Data? | When? | Where? | Important Notes |
|---|---|---|---|---|---|
Jira Service Management (Atlassian Corporation Plc) (HQ: Australia) | Customer Support Request Management |
| You create a support request through our support portal or via email to support@55degrees.se or support@actionableagile.com. When we create a support request on your behalf because you contacted us through other channels. | EU/EEA (primary) USA (subset of core data) | Technically, we don’t transfer your information. Refined, our Support Portal platform communicates directly with the JSM platform to authenticate users and manage support requests. Relevant Documents: |
Refined (HQ: Sweden) DPA upon request | Privacy Policy | Customer Support Request Management |
The following data is processed, but not stored
| When you log into our support portal at https://support.55degrees.se and when you create or manage support requests via our support portal. Refined provides a nice front-end to our Jira Service Management projects and is a proxy for Jira Service Management content. | EU | Technically, we don’t transfer your information. You interact directly with this subprocessor when using our support site. This subprocessor communicates with Atlassian’s Jira Service management platform for authentication and to manage support requests Relevant Documents: |
Our Community Site
Supplier | Purpose for the Processing or Storage | Which Data? | When? | Where? | Important Notes |
|---|---|---|---|---|---|
Mighty Networks (HQ: USA) DPA | Remove your data | Privacy Policy | EU/EEA/UK Privacy Notice | Cookie Policy | Community Platform Provider (SaaS) |
| When you visit or log into our community site at community.55degrees.se | USA | Technically, we don’t transfer your information. You interact directly with this subprocessor when using our community site. 55 Degrees has limited access to some of the automatically collected information in the form of analytics known as Mighty Insights. Mighty Networks will display a cookie banner for their own purposes and links directly to their cookie policy. |
Stripe (HQ: USA) | Credit card payment processing |
| Upon purchase or renewal of a paid course or plan for the Community Site. | USA | Technically, we don’t transfer your information. Our community site platform subprocessor, Mighty Networks, communicates directly with Stripe to handle billing. Relevant documents |
Quaderno (HQ: Spain) | SaaS VAT/Tax Compliance Service |
| When you purchase a paid course or other plans within the community | EU (Amsterdam) via Digital Ocean’s data center | Technically, we don’t transfer your information. Our Credit Card payment processing platform subprocessor communicates directly with Quaderno to handle tax calculations. Relevant documents |
Our Training and Workshops
Supplier | Purpose for the Processing or Storage | Which Data? | When? | Where? | Important Notes |
|---|---|---|---|---|---|
Automation Consultants (UK) | Share information about you and your participation in a workshop when they perform a workshop for us so they can:
|
| Following registration for a workshop. | UK | We send this information to the sub-processor via email. Relevant documents: |
Google Ireland (Google Workspace, including Email) | Customer Email Communication |
| When you email us. | All data is stored at rest in Europe.
| Technically, we don’t transfer your information. Your emails go directly to this sub-processor. Relevant documents |
Microsoft (Teams, OneDrive) | Video Meetings and Recording storage |
| When you register for or attend, a meeting hosted on the service. | EU | Technically, we don’t transfer your information. You either enter information directly into this subprocessor or another subprocessor (Google Workspace) transfers the data to Teams. Relevant documents |
Mighty Networks (HQ: USA) DPA | Remove your data | Privacy Policy | EU/EEA/UK Privacy Notice | Cookie Policy | Community Platform Provider (SaaS) |
| When you use our community platform to interact with others in a space dedicated to the training or workshop you’re enrolled in. | USA | Technically, we don’t transfer your information. You interact directly with this subprocessor when using our community site. 55 Degrees has limited access to some of the automatically collected information in the form of analytics known as Mighty Insights. Mighty Networks will display a cookie banner for their own purposes and links directly to their cookie policy. |
Mural (HQ: USA) | Collaboration / Digital Whiteboarding Platform (SaaS) |
| When you join a mural you can join anonymously or as a guest. If you join as a guest, which gives you additional privileges then you need to provide contact information. When you use Mural, the subprocessor collects information noted in their privacy policy. When you interact in a Mural, you control the content that you add to the workspace. | US | Technically, we don’t transfer your information. You enter information directly into this subprocessor. Relevant documents |
Training curriculum provider and certification body |
| When we send a list of candidates that are available for a free certification exam. | USA | We transfer information. Relevant documents | |
Quaderno (HQ: Spain) | SaaS VAT/Tax Compliance Service |
| When you use a credit card to pay for training or workshop and are subject to VAT. | EU (Amsterdam) via Digital Ocean’s data center | Technically, we don’t transfer your information. Our Credit Card payment processing platform subprocessor communicates directly with Quaderno to handle tax calculations. Relevant documents |
Stripe (HQ: USA) | Credit card payment processing |
| When you pay by credit card for any training or workshop, whether live or on-demand in the community. | USA | Do we technically transfer your data? If purchased through community site: No. Mighty Networks handles this. If you receive an invoice from us (not self-service): Yes. Relevant documents |
Zoom (HQ: USA) | Video Meetings and Recording storage |
| When you register for or attend, a meeting hosted on the service. | USA (data at rest) EU (data in transit) | Technically, we don’t transfer your information. You either enter information directly into this subprocessor or another subprocessor (Google Workspace, Mighty Networks) transfers the data to Zoom. Relevant documents |