1 | Name | Data Location | PII | Purpose | SCC | SCC 2021 Status | Data Processing Addendum | Data Retention Period | Recovery Time Objective (RTO) | Recovery Point Objective (RPO) | From Date | Termination Date | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
2 | Heroku | EU | YES | Server & Data Hosting | 2021 | Available | https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf | 1 week | 4 hours | 1 hour | 01.07.2020 | ||
3 | Fivetran | US | YES | Aggregating Data from different sources (CRM, Tracking DB, ...) | 2021 | Available | https://fivetran.com/legal/data-protection-agreement | 1 week | 6 hours | 30 minutes | 01.07.2020 | ||
4 | Cloudinary | US | NO | Media Hosting | 2021 | Available | https://cloudinary-res.cloudinary.com/image/upload/v1648052611/Cloudinary-Customer-Data-Processing-Agreement-DPA-March-2022.pdf | N/A | 2 hours | 15 minutes | 01.07.2020 | ||
5 | Sentry | US | YES | Application Logging | 2021 | Available | https://sentry.io/legal/dpa/3.0.0/ | 90 days | 3 hours | 1 hour | 01.07.2020 | ||
6 | Mailjet | EU | YES | Transactional Email sending | 2021 | Available | https://www.mailjet.com/dpa/ | Indefinite | 4 hours | 2 hours | 01.07.2020 | ||
7 | AWS | US | NO | DNS Routing, Content Delivery Network, Static Code Hosting | 2021 | Available | https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf | N/A | 2 hours | 15 minutes | 01.07.2020 | ||
8 | Elastic | US | NO | Database Hosting | 2016 | Requested | https://www.elastic.co/pdf/agreements/dpa/elastic-cloud-gdpr-data-processing-addendum.pdf | N/A | 4 hours | 1 hour | 01.07.2020 | ||
9 | Cloudflare | US | NO | DNS Routing, Content Delivery Network, Static Code Hosting | 2021 | Available | https://www.cloudflare.com/cloudflare_customer_DPAv3.pdf, https://www.cloudflare.com/cloudflare_customer_SCCs.pdf | N/A | 1 hour | 30 minutes | 01.07.2020 | ||
10 | Beamer | US | YES | Product Updates in Neocom admin portal | 2021 | Available | https://drive.google.com/file/d/1fQw-Jq7mI-vkn7lq_zSX0DXY-bxcbZLg/view | N/A | N/A | N/A | 01.07.2020 | 16.02.2023 | |
11 | Google Analytics | US | YES | Analysation of usage of the Neocom Admin Portal | 2021 | Available | https://business.safety.google/adsprocessorterms/ | 26 months | 24 hours | 24 hours | 01.07.2020 | ||
12 | Fly.io | US | YES | Server & Data Hosting | 2021 | Available | https://drive.google.com/file/d/1igT-WprGLckvhN33SEhOjC13MSSMyafD/view?usp=sharing | 1 week | 4 hours | 1 hour | 01.07.2022 | ||
13 | Datadog | EU | YES | Application Logging & Server Monitoring | 2021 | Available | https://www.datadoghq.com/pdf/Datadog_GDPR_Data_Processing_Addendum_v2.0_2021.09.27.pdf | Indefinite | 2 hours | 1 hour | 01.07.2020 | ||
14 | DataFeedWatch | DE | NO | Processing & transforming product feeds | Requested | https://www.datafeedwatch.com/privacy-policy | N/A | 6 hours | 3 hours | 01.07.2020 | |||
15 | Hetzner | EU | NO | Optional storage for feeds | 2021 | Available | https://docs.hetzner.com/general/general-terms-and-conditions/data-privacy-faq/ | N/A | 4 hours | 2 hours | 01.07.2020 | ||
16 | DigitalOcean | EU | YES | Server & Data Hosting | 2021 | Available | https://www.digitalocean.com/legal/data-processing-agreement | 2 weeks | 4 hours | 1 hour | 01.03.2023 | ||
17 | Hubspot | US | YES | Customer Support Admin Portal & Help Center | 2022 | Available | https://legal.hubspot.com/dpa | Indefinite | 4 hours | 2 hours | 20.02.2023 | ||
18 | ClickHouse Cloud | EU | YES | Data Hosting | 2021 | Available | https://clickhouse.com/legal/agreements/data-processing-addendum | Indefinite | 3 hours | 1 hour | 01.05.2023 | ||
19 | Vitally | EU | YES | Customer Data & Customer Experience | 2021 | Available | https://www.vitally.io/saas-terms | Indefinite | 5 hours | 2 hours | 15.12.2023 | ||
20 | Fixie | EU | NO | HTTP Proxy and Tunneling | Requested | https://drive.google.com/file/d/14TN0QBJycmeb0i7e4v3WbM4UrBc6CVTo/view?usp=sharing | N/A | 6 hours | 3 hours | 05.01.2024 |
1 | Name | Optional? | Data Location | PII | Certifications | Purpose | SCC | SCC 2021 Status | Data Processing Addendum | Data Retention Period | Recovery Time Objective (RTO) | Recovery Point Objective (RPO) | From Date | Termination Date | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
2 | Heroku | no | EU | YES | PCI-DSS; ISO 27001, 27017 and 27018; SOC1, SOC2, SOC3 | Server & Data Hosting | 2021 | Available | https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf | 1 week | 4 hours | 1 hour | 01.07.2020 | ||
3 | Fivetran | no | US | YES | ISO 27001, PCI DSS, EU 94/95 privacy rules, GDPR, SOC2 Type 2 | Aggregating Data from different sources (CRM, Tracking DB, ...) | 2021 | Available | https://fivetran.com/legal/data-protection-agreement | 1 week | 6 hours | 30 minutes | 01.07.2020 | ||
4 | Cloudinary | no | US | NO | SOC 2 Type II | Media Hosting | 2021 | Available | https://cloudinary-res.cloudinary.com/image/upload/v1648052611/Cloudinary-Customer-Data-Processing-Agreement-DPA-March-2022.pdf | N/A | 2 hours | 15 minutes | 01.07.2020 | ||
5 | Sentry | no | US | YES | SOC 2 Type 2 and ISO 27001 | Application Logging | 2021 | Available | https://sentry.io/legal/dpa/3.0.0/ | 90 days | 3 hours | 1 hour | 01.07.2020 | ||
6 | Mailjet | no | EU | YES | ISO 27001 | Transactional Email sending | 2021 | Available | https://www.mailjet.com/dpa/ | Indefinite | 4 hours | 2 hours | 01.07.2020 | ||
7 | AWS | no | US | NO | SOC1, SOC2, SOC 3 | DNS Routing, Content Delivery Network, Static Code Hosting | 2021 | Available | https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf | N/A | 2 hours | 15 minutes | 01.07.2020 | ||
8 | Elastic | no | US | NO | ISO 27001, 27017, 27018, SOC 2, SOC 3 | Database Hosting | 2016 | Requested | https://www.elastic.co/pdf/agreements/dpa/elastic-cloud-gdpr-data-processing-addendum.pdf | N/A | 4 hours | 1 hour | 01.07.2020 | ||
9 | Cloudflare | no | US | NO | ISO 27001:2013, ISO 27701:2019, PCI DSS 3.2.1, SOC 2 Type II | DNS Routing, Content Delivery Network, Static Code Hosting | 2021 | Available | https://www.cloudflare.com/cloudflare_customer_DPAv3.pdf, https://www.cloudflare.com/cloudflare_customer_SCCs.pdf | N/A | 1 hour | 30 minutes | 01.07.2020 | ||
10 | Google Analytics | no | US | YES | ISO 27701, 27018, 27017, 27001, SOC1, SOC2, SOC3 | Analysation of usage of the Neocom Admin Portal | 2021 | Available | https://business.safety.google/adsprocessorterms/ | 26 months | 24 hours | 24 hours | 01.07.2020 | ||
11 | Fly.io | no | US | YES | SOC2 and HIPAA | Server & Data Hosting | 2021 | Available | https://drive.google.com/file/d/1igT-WprGLckvhN33SEhOjC13MSSMyafD/view?usp=sharing | 1 week | 4 hours | 1 hour | 01.07.2022 | ||
12 | Datadog | no | EU | YES | ISO 27001, SOC 2, ISO 27701 | Application Logging & Server Monitoring | 2021 | Available | https://www.datadoghq.com/pdf/Datadog_GDPR_Data_Processing_Addendum_v2.0_2021.09.27.pdf | Indefinite | 2 hours | 1 hour | 01.07.2020 | ||
13 | DataFeedWatch | yes | DE | NO | n/a | Processing & transforming product feeds | Requested | https://www.datafeedwatch.com/privacy-policy | N/A | 6 hours | 3 hours | 01.07.2020 | |||
14 | Hetzner | no | EU | NO | ISO/IEC 27001 | Optional storage for feeds | 2021 | Available | https://docs.hetzner.com/general/general-terms-and-conditions/data-privacy-faq/ | N/A | 4 hours | 2 hours | 01.07.2020 | ||
15 | DigitalOcean | no | EU | YES | SOC 2 Type II, SOC 3 Type II | Server & Data Hosting | 2021 | Available | https://www.digitalocean.com/legal/data-processing-agreement | 2 weeks | 4 hours | 1 hour | 01.03.2023 | ||
16 | Hubspot | no | US | YES | SOC3 and SOC 2 Type 2 | Customer Support Admin Portal & Help Center | 2022 | Available | https://legal.hubspot.com/dpa | Indefinite | 4 hours | 2 hours | 20.02.2023 | ||
17 | ClickHouse Cloud | no | EU | YES | SOC 2 Type II | Data Hosting | 2021 | Available | https://clickhouse.com/legal/agreements/data-processing-addendum | Indefinite | 3 hours | 1 hour | 01.05.2023 | ||
18 | Vitally | no | EU | YES | SOC 2 | Customer Data & Customer Experience | 2021 | Available | https://www.vitally.io/saas-terms | Indefinite | 5 hours | 2 hours | 15.12.2023 | ||
19 | Fixie | yes | EU | YES | n/a | HTTP Proxy and Tunneling | Requested | https://drive.google.com/file/d/14TN0QBJycmeb0i7e4v3WbM4UrBc6CVTo/view?usp=sharing | N/A | 6 hours | 3 hours | 05.01.2024 |