Sub-processors
Auvik Networks Inc. (“Auvik”) uses certain sub-processors and content delivery networks to assist it in providing the Auvik Services. Capitalized terms used and not otherwise defined below will have the meanings given to such terms in our Terms of Service.
What Is a Sub-processor?
A sub-processor is a third-party data processor engaged by Auvik, who has or potentially will have access to or process Network Data (which may contain personal data). Auvik engages different types of sub-processors to perform various functions as explained in the tables below. Auvik refers to third parties that do not have access to or process Network Data, but who are otherwise used to provide the Services, as “sub-contractors” and not sub-processors.
Due Diligence
Auvik undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy, and confidentiality practices of proposed sub-processors that will or may have access to or process Network Data.
Contractual Safeguards
Auvik requires its sub-processors to satisfy equivalent obligations as those required from Auvik (as a Data Processor) as set forth in Auvik’s Terms of Service, including but not limited to the requirements to:
- process personal data in accordance with data controller’s (i.e. Customer’s) documented instructions (as communicated in writing to the relevant sub-processor by Auvik);
- in connection with their sub-processing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws;
- provide regular training in security and data protection to personnel to whom they grant access to personal data;
- implement and maintain appropriate technical and organizational measures (including measures consistent with those to which Auvik is contractually committed to adhere insofar as they are equally relevant to the sub-processor’s processing of personal data on Auvik’s behalf)
- promptly inform Auvik about any actual or potential security breaches; and cooperate with Auvik in order to facilitate requests from data controllers, data subjects, or data protection authorities, as applicable.
This notice does not give Customers any additional rights or remedies and should not be construed as a binding agreement. The information herein is to provide the actual list of third-party sub-processors and content delivery networks used by Auvik as of the date of this notice (which Auvik may use in the delivery and support of its Services).
Infrastructure Sub-processors – Network Data Storage
Auvik controls access to the infrastructure that Auvik uses to host Network Data submitted to the Services, other than as set forth below. Currently, the Auvik production systems for the Services are located in co-location facilities in the United States and the European Union. Customers may be shifted among data centers within a region to promote performance and availability of the Services. The following table describes the countries and legal entities engaged in the storage of Network Data by Auvik.
| Entity Name | Entity Type | Entity Country | Legal Safeguard |
|---|---|---|---|
| Amazon Web Services Inc. | Cloud Service Provider | Australia, Canada, Germany, Ireland, United States | Data Processing Agreement with Standard Contractual Clauses |
Service Specific Sub-processors
Auvik works with certain third parties to provide specific functionality within the Services. These providers are the sub-processors set forth below. In order to provide the relevant functionality these sub-processors access Network Data. Their use is limited to the indicated Services.
| Entity Name | Purpose | Applicable Services | Entity Country | Legal Safeguard |
|---|---|---|---|---|
| PartnerStack | PartnerStack provides an online resource (SaaS) product to large companies that sell their products through channels or reseller | Auvik Service | Canada | Article 45 GDPR |
| Zendesk | Used by technical support and the customer success team to manage tickets concerning product support, billing, and other related issues. | Auvik Support | United States | Data Processing Agreement with Standard Contractual Clauses |
| Salesforce | Stores customer contact information, subscription status, and other related information. | Auvik Service | United States | Data Processing Agreement with Standard Contractual Clauses |
| Marketo | Used by marketing to provide lead qualifying, personalized experience, and emails for Auvik customers. | Auvik Support | United States | Data Processing Agreement with Standard Contractual Clauses |
| Zuora | Subscription billing processor for Auvik customers. | Auvik Service | United States | Data Processing Agreement with Standard Contractual Clauses |
| Salesloft | Auvik Sales platform | Auvik Support | United States | Data Processing Agreement with Standard Contractual Clauses |
| Totango | Customer Success Management platform | Auvik Customer Success | United States | Data Processing Agreement with Standard Contractual Clauses |
| Gong.io | Conversation intelligence platform | Auvik Sales | United States | Data Processing Agreement with Standard Contractual Clauses |
| Pendo.io | Product analytics | Auvik Support | United States | Data Processing Agreement with Standard Contractual Clauses |
| Heap Inc. | Product analytics | Auvik Support | United States | Data Processing Agreement with Standard Contractual Clauses |
| Okta | Identity and access management tool | Auvik Service | United States | Data Processing Agreement with Standard Contractual Clauses |
Auvik Group Sub-processors
The following entities are affiliates assisting Auvik with provisioning of Services. Accordingly, they function as sub-processors to provide the Services.
| Entity Name | Country |
|---|---|
| Auvik Networks Inc. | Canada |
| Auvik US Inc. | United States |
| BoardGent SAS | Columbia |
| Auvik Networks ES S.L. | Spain |
| Auvik Networks UK Limited | United Kingdom |
| MetaGeek Inc. | United States |
| Saaslio Inc. | United States |
Content Delivery Networks
As explained above, Auvik’s Services may use content delivery networks (“CDNs”) to provide the Services, for security purposes, and to optimize content delivery. CDNs do not have access to Network Data but are commonly used systems of distributed services that deliver content based on the geographic location of the individual accessing the content and the origin of the content provider. Website content served to website visitors and domain name information may be stored with a CDN to expedite transmission, and information transmitted across a CDN may be accessed by that CDN to enable its functions. The following describes the use of CDNs by Auvik’s Services.
| CDN Provider | Services Using CDN | CDN Location | Description of CDN Services | Legal Safeguard |
|---|---|---|---|---|
| Amazon Web Services Inc. | Auvik Service | Global | Public website content served to website visitors may be stored with Amazon Web Services, Inc., and transmitted by Amazon Web Services, Inc., to website visitors, to expedite transmission. | Data Processing Addendum with Standard Contractual Clauses |
| Cloudflare Inc. | Auvik.com | Global | Public website content served to website visitors may be stored with Cloudflare, Inc., and transmitted by Cloudflare, Inc., to website visitors, to expedite transmission. | Data Processing Addendum with Standard Contractual Clauses |
As of November 6, 2023