A subprocessor is a third party that processes customer personal data on Elastly's behalf to provide the service. Each one acts only on our instructions, under a written agreement with data protection terms no less protective than our data processing agreement. Elastly remains responsible for them.
What we use subprocessors for
- Cloud infrastructure
Hosting the service and storing workspace data and encrypted backups in the European Union.
All workspace data- AI provider
Answering questions in the AI assistant, in the United States. The provider does not train on customer data.
Assistant requests- Email delivery
Sending sign-in, invitation, approval and billing emails, from the United States.
Name and email- Error monitoring
Detecting and fixing errors, without user details or request contents.
Technical details- Payments
Billing and payment processing, in the United States and the European Union.
Billing details
Getting the current list
Each customer's account owner receives the current list, with each subprocessor's name, purpose, location and transfer safeguard, by email when the account is created and with every change notice. Prospective customers reviewing Elastly can request the list by writing to privacy@elastly.ai. We reply within two working days.
Transfers outside the European Economic Area, the United Kingdom and Switzerland are covered by the Standard Contractual Clauses or the EU-US Data Privacy Framework.
Changes
We notify customers at least 30 days before we add or replace a subprocessor. Notices go to the account owner's email address. If you object to a new subprocessor on reasonable data protection grounds, tell us within the notice period. The process is described in section 7 of the data processing agreement.