SUBPROCESSORS
Subprocessors
Review the external service providers used by INNORIX to support the operation and delivery of eligible INNORIX services.
INNORIX may entrust certain functions required to provide the Services to trusted external service providers.
This page identifies the primary Subprocessors and Service Providers that may process Customer Personal Data or Service Data in connection with the operation of INNORIX Services.
Current Subprocessors and Service Providers#
| Provider | Purpose | Service Category | Data Processed |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure and hosting | Cloud Infrastructure | Account information, service metadata, operational data and Customer Personal Data processed through applicable INNORIX-managed services |
| OVHcloud | Cloud infrastructure and hosting | Cloud Infrastructure | Account information, service metadata, operational data and Customer Personal Data processed through applicable INNORIX-managed services |
| Stripe | Payment processing, subscription billing and payment administration | Payments & Billing | Billing information, transaction information, payment status, customer and organization identifiers and related payment information |
Amazon Web Services (AWS)#
INNORIX may use Amazon Web Services to provide cloud infrastructure required for INNORIX-managed services.
Depending on the INNORIX service and selected deployment region, AWS may process information such as:
Account and organization identifiers
Service metadata
Device and connection information
Operational logs
Application and infrastructure data
Customer Personal Data processed through the applicable hosted service
The AWS infrastructure and processing location used for a particular service may depend on the selected AWS Region and the AWS services used.
AWS maintains its own list of subprocessors applicable to its services and regions.
OVHcloud#
INNORIX may use OVHcloud to provide cloud infrastructure and hosting for applicable services.
Depending on the service configuration, OVHcloud may process information such as:
Account and organization identifiers
Service metadata
Operational data
Application data
Customer Personal Data stored or processed within applicable hosted infrastructure
The processing location depends on the infrastructure and region used to provide the applicable INNORIX service.
OVHcloud states in its Data Processing Agreement that it may act as a Processor or Subprocessor for customer content processed through its services.
Stripe#
INNORIX uses Stripe for payment and billing-related services.
Stripe may process information such as:
Customer or organization name
Billing address
Payment-related contact information
Transaction information
Payment status
Subscription and invoice-related information
Payment method information submitted directly to Stripe
Payment card information may be collected and processed directly by Stripe rather than being stored by INNORIX.
Depending on the particular processing activity, Stripe may act as a Data Processor or as an independent Data Controller under its own privacy and data-processing terms.
Processing Locations#
The location in which data is processed may vary depending on:
the INNORIX service used
selected deployment region
cloud infrastructure configuration
customer location
provider service architecture
INNORIX does not represent that all Customer Personal Data is processed in a single country unless a specific data residency commitment is included in the applicable service or customer agreement.
International Data Transfers#
Where Customer Personal Data is transferred across jurisdictions, INNORIX uses applicable contractual and legal safeguards as required by relevant Data Protection Law.
Additional information regarding international data transfers is available in the INNORIX Data Processing Addendum.
Subprocessor Security#
INNORIX selects service providers that support the operation, security and delivery of the Services.
Where a provider processes Customer Personal Data on behalf of INNORIX, INNORIX applies appropriate contractual data-protection requirements consistent with applicable law and the INNORIX DPA.
Cloud infrastructure providers may engage their own subprocessors in accordance with their respective contractual terms.
Changes to Subprocessors#
INNORIX may add, replace or discontinue Subprocessors as its services and infrastructure evolve.
Where required by applicable Data Protection Law or the INNORIX DPA, INNORIX will provide appropriate notice of material changes to Subprocessors that process Customer Personal Data.
The current list published on this page reflects the providers used for applicable INNORIX Services.
Customer-Selected Services#
A third-party service selected and connected directly by a Customer is not necessarily an INNORIX Subprocessor.
Examples may include customer-selected:
Cloud accounts
Object storage
Identity providers
SIEM platforms
Monitoring systems
Collaboration tools
Such services are controlled by the Customer and are subject to the respective provider's terms and privacy practices.
Related Resources#
Data Processing Addendum
Terms governing INNORIX's processing of Customer Personal Data.
Privacy Policy
Information about how INNORIX collects and uses Personal Data.
Security
Security architecture and safeguards for INNORIX Services.
Terms
General terms governing use of INNORIX Services.