Updated: October 2021
Vendor: Amazon Web Services (AWS)
Website: https://aws.amazon.com
Purpose: Database and hosting
Type of personal data processed: Learner Course usage details
Location of processing: Server region set by Elucidat – currently AWS EU (Dublin) Region. (Amazon Web Services EMEA SARL)
Compliance mechanism for ex-EEA transfer: N/A: Contracted not to move data from the AWS region selected by Elucidat
Article 28 Data Processing Agreement: AWS GDPR Data Processing Addendum, part of Service Terms at clause 83 of Service Terms
Vendor: Elucidat Inc.
Website: https://elucidat.com
Purpose: Process for purpose of sales and technical support as affiliate of Elucidat Group
Type of personal data processed: Learner Course usage details
Location of processing: Processing happening locally in North Carolina
Compliance mechanism for ex-EEA transfer: Standard Contractual Clauses (see our Licence Agreement)
Article 28 Data Processing Agreement: Intra-Group Data Transfer Agreement
Vendor: Intercom
Website: https://www.intercom.com
Purpose: Customer communication system
Type of personal data processed: Learner Course usage details
Location of processing: US, EEA and UK
Compliance mechanism for ex-EEA transfer: Standard Contractual Clauses
Article 28 Data Processing Agreement: Data Processor Agreement in place complying with Article 28 GDPR
Vendor: SendGrid
Website: https://sendgrid.com
Purpose: Cloud-based email delivery platform
Type of personal data processed: Existing Author App usage & Learner Contact details
Location of processing: US and UK
Compliance mechanism for ex-EEA transfer: Standard Contractual Clauses
Article 28 Data Processing Agreement: Data Processor Agreement in place complying with Article 28 GDPR + Signed DPA + Signed DPA in place containing EC Standard Contractual Clauses
Vendor: Zendesk
Website: https://www.zendesk.co.uk
Purpose: Customer support platform
Type of personal data processed: Learner Course usage details
Location of processing: UK, EU & US
Compliance mechanism for ex-EEA transfer: Signed DPA in place containing EC Standard Contractual Clauses
Article 28 Data Processing Agreement: Data Processor Agreement in place complying with Article 28 GDPR