Latest update: 2021-03-01
| Sub-processor | Service | Protection of third country transfer | OpenProject’s data privacy strategy |
|---|---|---|---|
| Amazon Web Services EMEA SARL – AWS, 38 Avenue John F. Kennedy, L-1855 Luxembourg | Infrastructure-as-a-Service - we only host in Dublin, Ireland (EU) | Standard Data Protection Clauses (Art. 46 para. 2 lit. c GDPR) | Migrate to a subcontractor headquartered in the EU |
| MessageBird B.V., Baarsjesweg 285-H, 1058 AE Amsterdam, Netherlands | Transmission of authorization token via SMS or voice call for two-factor authentication | No transfer | |
| Wildbit LLC – Postmark, 225 Chestnut St, Philadelphia PA 19106, USA | Sending of email messages | Standard Data Protection Clauses (Art. 46 para. 2 lit. c GDPR) | Migrate to a subcontractor based in the EU (2021) |
| HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge MA 02141, USA | Answering sales and support inquiries, newsletter management | Standard Data Protection Clauses (Art. 46 para. 2 lit. c GDPR) | Migrate to a subcontractor based in the EU (2021) |
| Heinlein Hosting GmbH – mailbox.org, Schwedter Str. 8/9b, D-10119 Berlin, Germany | Sending email messages and processing of incoming emails | No transfer |