Secureframe Subprocessors

Last Updated: July 21, 2023

To support delivery of our Services, Secureframe, Inc. ("Secureframe") (or one of its Affiliates) uses service providers (each, a "Subprocessor") that may store and process Customer Data (which may contain personal data). This page provides important information about the identity, location and role of each Subprocessor. Secureframe engages different types of sub-processors to perform various functions as explained below. Terms used on this page but not defined have the meaning set forth in the Terms of Service or if applicable, the superseding written agreement between Secureframe and Customer (the "Agreement").

Third Parties

Secureframe currently uses the following third party Subprocessors to provide infrastructure services, certain support related activities and email notifications. Additional Subprocessors may be identified within the product via “just-in-time” notices, where a customer must opt-in to use a certain feature that is powered by an additional Subprocessor.

Prior to engaging any Subprocessor, Secureframe performs commercially reasonable diligence to evaluate their security, privacy and confidentiality practices, and executes an agreement implementing its applicable obligations.

Subprocessors

Entity Name Purpose for Processing Entity Country
Amazon Web Services, Inc. Hosting / Cloud Platform United States
Catamorphic Co. (LaunchDarkly) Feature Flag Management United States
Fivetran Data Pipeline ETL United States
Functional Software, Inc. (Sentry) Error identification, tracking and resolution United States
OneSchema Data Import Structuring United States
OpenAI AI-Powered Product Features United States
Retool, Inc. Customer Provisioning and Administration United States
Sigma Computing, Inc. Data Analytics & Visualization United States
Talend Data Pipeline ETL United States
Twilio, Inc. Email communications about Customer’s use of the Services and related product engagement United States

Secureframe Affiliates

Depending on the geographic location of a Customer or their authorized users, and the nature of the Services provided, Secureframe may also engage one or more of the following Affiliates as Subprocessors to deliver some or all of the Services to a Customer.

Secureframe Europe Limited United Kingdom

Updates

As our business grows and evolves, the Subprocessors we engage may change. We will provide the owner of Customer’s account with notice of any new Subprocessors and an opportunity to object, in accordance with the Agreement, along with posting such updates here.