Cyberday subprocessors

This document describes the service providers participating in the Cyberday Inc. service process, who have a role in processing the data related to Cyberday. This description is updated regularly to reflect any changes in the supply chain.

Last updated 13.12.2024.‍

Alihankkija
Rooli
Sijainti
Salesforce.com, Inc.
Server capacity
EU (Ireland)
Data storage location: EU (Ireland)
Data processing location: EU, USA
Processing role: Maintaining and offering Heroku-server platform
Processed data: Offering capacity, no role in proper data processing
Contract about processing: Cloud service order, annex SALESFORCE DATA PROCESSING ADDENDUM
The service provider is listed in EU-U.S. Data Privacy Framework.
Processing purpose: Heroku-platform is used for operating system level services on which code produced by Agendium runs. The objective of this setup is to allow working services while making sure operating system level services are secure and up to date.
Microsoft Corporation
Server capacity
EU (Ireland)
Data storage location: EU (Irlanti)
Data processing location: EU, Yhdysvallat
Processing role: Offering Azure-platform to be base for service provided by Agendium
Processed data: Offering processing capacity, no role in proper data processing
Contract about processing: Cloud service order, annex Online Services Data Protection Addendum. The service provider is listed in EU-U.S. Data Privacy Framework.
Processing purpose: Microsoft Azure-platforms different components are used to provide and maintain services.
Amazon Web Services
Storage capacity
EU (Ireland)
Data processing location: EU, USA
Processing role: Offering storage capacity, no role in data processing
Processed data: Files and data saved in the services, reports generated in the service
Contract about processing: AWS GDPR Data Processing Addendum, annex in service agreement terms of service
The service provider is listed in EU-U.S. Data Privacy Framework.
Processing purpose: AWS S3-platform is used to save, distribute and process files related to the service
Auth0, Inc.
Authentication platform
EU
Data processing location: EU, USA
Processing role: Securing authentication and storing authentication information when Teams-environment is not used
Processed data: Authentication information used in the service
Contract about processing: Cloud service order, annex AUTH0 DATA PROCESSING ADDENDUM
The service provider is listed in EU-U.S. Data Privacy Framework.
Processing purpose: When authentication is done using Cyberday user account, Auth0 authenticates the user with authentication methods chosen by the user.
Intercom R&D Unlimited Company
Chat-service
USA
Data processing location: USA
Processing role: Archiving support chat conversations
Processed data: User identification info, support chat conversations
Contract about processing: Cloud service order, annexINTERCOM DATA PROCESSING ADDENDUM
The service provider is listed in EU-U.S. Data Privacy Framework.
Processing purpose: The customers use of Cyberday is supported with chat support and by informing customers about the latest development in the service.
Twilio, Inc.
SMS message API
USA
Data processing location: USA
Processing role: Sending one time use passwords in a text message
Processed data: User phone number
Contract about processing: Cloud service order, annex TWILIO DATA PROCESSING ADDENDUM
The service provider is listed in EU-U.S. Data Privacy Framework.
Processing purpose: Enabling text message authentication, when Microsoft Teams is not used
The Rocket Science Group (MailChimp)
Email API
USA
Data processing location: USA
Processing role: Sending emails and saving log data
Processed data: User email
Sopimus käsittelystä: Cloud service order, annex MAILCHIMP DATA PROCESSING ADDENDUM
The service provider is listed in EU-U.S. Data Privacy Framework.
Processing purpose: Delivering email invites to users by admins and tracking delivery status
Microsoft Corporation
Authentication platform
USA
Data processing location: USA
Processing role: Authenticating to the service in Teams environment
Processed data: Teams-ID, Azure AD -ID
Processing purpose: With Microsoft-managed organisation and user Teams and Azure AD credentials, the Cyberday user is linked to the correct Cyberday content without creating separate credentials.
Datadog Inc.
Monitoring and analytics
USA
Data processing location: USA
Processing role: Operational security monitoring
Processed data: User's email address and browser details, IP address, event logs on the service
Contract about processing: Cloud subscription, enclosed DATADOG DATA PROCESSING ADDENDUM
EU-U.S. Data Privacy Framework -registered operator
Processing purpose: Datadog is used to collect and analyse log data related to the service, for example to identify possible nonconformities and ensure performance.

Are you ready to get started?

Start free trial or book a demo.

Start free trial

Get started today

Start free, in your familiar Teams environment.
If you have some questions first, book a meeting with us.

Start free 14-day trial
Book a meeting
How it works?
SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templates
Use cases
By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018
By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementDynamic policy documentsPrivacy management
Resources
AcademyWebinarsBlogLeave a reviewPartner programTeamTerms of usePrivacy policy
Contact us
+358 10 231 6010
team@cyberday.ai
App works in:
Known in Finland as Digiturvamalli
© Cyberday Inc. Kalevantie 2 33100 Tampere, Finland
Cyberday.ai - Improve and certify your cyber security
Tietosuojamalli 2.0 on julkaistu!
Lue lisää blogista >>