SUBPROCESSORS

Subprocessors

INNORIX may entrust certain functions required to provide the Services to trusted external service providers.

This page identifies the primary Subprocessors and Service Providers that may process Customer Personal Data or Service Data in connection with the operation of INNORIX Services.

Current Subprocessors and Service Providers

Provider	Purpose	Service Category	Data Processed
Amazon Web Services (AWS)	Cloud infrastructure and hosting	Cloud Infrastructure	Account information, service metadata, operational data and Customer Personal Data processed through applicable INNORIX-managed services
OVHcloud	Cloud infrastructure and hosting	Cloud Infrastructure	Account information, service metadata, operational data and Customer Personal Data processed through applicable INNORIX-managed services
Stripe	Payment processing, subscription billing and payment administration	Payments & Billing	Billing information, transaction information, payment status, customer and organization identifiers and related payment information

Amazon Web Services (AWS)

INNORIX may use Amazon Web Services to provide cloud infrastructure required for INNORIX-managed services.

Depending on the INNORIX service and selected deployment region, AWS may process information such as:

Account and organization identifiers
Service metadata
Device and connection information
Operational logs
Application and infrastructure data
Customer Personal Data processed through the applicable hosted service

The AWS infrastructure and processing location used for a particular service may depend on the selected AWS Region and the AWS services used.

AWS maintains its own list of subprocessors applicable to its services and regions.

OVHcloud

INNORIX may use OVHcloud to provide cloud infrastructure and hosting for applicable services.

Depending on the service configuration, OVHcloud may process information such as:

Account and organization identifiers
Service metadata
Operational data
Application data
Customer Personal Data stored or processed within applicable hosted infrastructure

The processing location depends on the infrastructure and region used to provide the applicable INNORIX service.

OVHcloud states in its Data Processing Agreement that it may act as a Processor or Subprocessor for customer content processed through its services.

Stripe

INNORIX uses Stripe for payment and billing-related services.

Stripe may process information such as:

Customer or organization name
Billing address
Payment-related contact information
Transaction information
Payment status
Subscription and invoice-related information
Payment method information submitted directly to Stripe

Payment card information may be collected and processed directly by Stripe rather than being stored by INNORIX.

Depending on the particular processing activity, Stripe may act as a Data Processor or as an independent Data Controller under its own privacy and data-processing terms.

Processing Locations

The location in which data is processed may vary depending on:

the INNORIX service used
selected deployment region
cloud infrastructure configuration
customer location
provider service architecture

INNORIX does not represent that all Customer Personal Data is processed in a single country unless a specific data residency commitment is included in the applicable service or customer agreement.

International Data Transfers

Where Customer Personal Data is transferred across jurisdictions, INNORIX uses applicable contractual and legal safeguards as required by relevant Data Protection Law.

Additional information regarding international data transfers is available in the INNORIX Data Processing Addendum.

Data Processing Addendum

Subprocessor Security

INNORIX selects service providers that support the operation, security and delivery of the Services.

Where a provider processes Customer Personal Data on behalf of INNORIX, INNORIX applies appropriate contractual data-protection requirements consistent with applicable law and the INNORIX DPA.

Cloud infrastructure providers may engage their own subprocessors in accordance with their respective contractual terms.

Changes to Subprocessors

INNORIX may add, replace or discontinue Subprocessors as its services and infrastructure evolve.

Where required by applicable Data Protection Law or the INNORIX DPA, INNORIX will provide appropriate notice of material changes to Subprocessors that process Customer Personal Data.

The current list published on this page reflects the providers used for applicable INNORIX Services.

Customer-Selected Services

A third-party service selected and connected directly by a Customer is not necessarily an INNORIX Subprocessor.

Examples may include customer-selected:

Cloud accounts
Object storage
Identity providers
SIEM platforms
Monitoring systems
Collaboration tools

Such services are controlled by the Customer and are subject to the respective provider's terms and privacy practices.

Related Resources

Data Processing Addendum
Terms governing INNORIX's processing of Customer Personal Data.

Security
Security architecture and safeguards for INNORIX Services.

Terms
General terms governing use of INNORIX Services.