Subscribe to an RSS feed to be notified when we add new Capacity sub-processors (note: you will need to cut and paste the “Subscribe to an RSS feed” URL into an RSS Feed Reader to monitor updates).
Capacity uses certain sub-processors to assist in providing Capacity’s services. A sub-processor is a third-party company engaged by Capacity to process data, which may include customers’ personal data (i) on behalf of Capacity customers; (ii) in accordance with customer instructions as communicated by Capacity (typically as set out in Capacity’s Services Agreement with its customers); and (iii) in strict accordance with the terms of a written contract between Capacity and the sub-processor.
Generally, Capacity contractually obligates its sub-processors to implement appropriate technical and organizational measures to ensure that the sub-processing of data is protected to the standards required by applicable data protection laws. Further information relating to sub-processor security measures can be found via the external links below and by reviewing such sub-processors’ websites.
Where the engagement of a sub-processor requires the cross-border transfer of personal data, Capacity has performed transfer impact assessments for such data transfer or otherwise complied with applicable data protection laws.
Capacity maintains an up-to-date list of the names and locations of all sub-processors below. Capacity customers may check this page for updates to sub-processors.
Platform | Sub-processor | Applicable Service(s) | Subject Matter | Nature and Purpose of Processing | Location |
---|---|---|---|---|---|
Capacity | 3NNUX | Customer Success | Customer organization configuration | Customer onboarding and support | Philippines |
Capacity | Adobe | Marketo | Client personal contact data | Client Support | USA |
Capacity | AWS | Infrastructure Provider — all Capacity services | Personal data contained in communication and knowledge base sent through Capacity’s services | Infrastructure Provider providing hosting services and storage. | USA |
Capacity | Beamer | Product update notifications | Capacity account details | Notifying clients of new features and updates, allowing submissions of product feature requests, NPS | USA |
Capacity | Clumio | Data Backup | Personal data contained in communications and knowledge base sent through Capacity’s services | Data Recovery Solution | USA |
Capacity | Datadog | Log Monitoring | Data Logs | Infrastructure Status Monitoring | USA |
Capacity | Google LLC | Personal data contained in emails. | Email service provider | USA | |
Capacity | Hubspot | SalesForce | Client personal contact data | Client Support | USA |
Capacity | Lacework | IDS | Network Data | Network Security | USA |
Capacity | Mailgun | Platform Email Features | Personal data contained in emails | Routing and transmission of emails | USA |
Capacity | Maxio, LLC | Service Invoices | Information contained in invoices | Automated invoice delivery | USA |
Capacity | OpenAI | AI content generation | Client queries sent for generative AI services | Optional configuration for AI enrichment | USA |
Capacity | SalesForce | SalesForce | Client personal contact data | Client Support | USA |
Capacity | Sentry.io | Performance Monitoring | Exception logging | Error tracking and performance monitoring | USA |
Capacity | Slack Technologies | Instant messaging | Personal data contained in instant messages. | Instant Messaging service provider | USA |
Capacity | Stripe, Inc. | Credit card payment processing. | Credit card processing information | Customers submit information directly to Stripe for payment services. | USA |
Capacity | Tableau | Tableau | Data contained in analytics | Data analytics functionality for clients | USA |
Capacity | Userpilot, Inc. | Self service activation | Personal data provided during product enrollment. | Automated customer onboarding (checklists, popup guides) and user information | USA |
Capacity | Zoom | Zoom | Video and Audio Data | Client Support | USA |
Textel | 3NNUX | Implementation and Support | Personal data contained in communications sent through Textel’s services. | Solution implementation and customer support | Philippines |
Textel | Authvia | Text-based payments | Payments | USA | |
Textel | Bandwidth | SMS text carrier | Personal data contained in SMS communications | SMS text carrier | USA for US-based services EU for EU & UK-based services |
Textel | ChargeOver | Automated Invoicing Software | Billing information | Customer billing | USA |
Textel | Datadog | Log Monitoring | Data Logs | Infrastructure Status Monitoring | USA for US-based services EU for EU & UK-based services |
Textel | iConnective | SMS text carrier | Personal data contained in SMS communications | SMS text carrier | USA |
Textel | Maxio | Automated Invoicing Software | Billing information | Customer billing | USA |
Textel | Microsoft Azure | Infrastructure Provider | Personal data contained in communications sent through Textel’s services. | Hosting services and storage | USA for US-based services EU for EU & UK-based services |
Textel | Microsoft O365 | Email and Data Storage | Personal data contained in communications sent through Textel’s email. | Communications | USA |
Textel | SalesForce | SalesForce | Customer personal contact data | Customer communication | USA |
Textel | Sinch.) | SMS text carrier | Personal data contained in SMS communications | SMS text carrier | USA for US-based services EU for EU & UK-based services |
Textel | Stackify | Log Monitoring | Data Logs | Infrastructure Status Monitoring | USA |
Textel | Syniverse | SMS text carrier | Personal data contained in SMS communications | SMS text carrier | USA for US-based services EU for EU & UK-based services |
Textel | Twilio | SMS Text Carrier | Personal data contained in SMS communications | SMS text carrier | USA |
Lucy | Atlassian | Jira, Confluence, BitBucket | Jira, Confluence, BitBucket | AWS regions across the United States, Germany, Ireland, Singapore, and Australia | |
Lucy | Auth0 | User Authentication | User Authentication | N. California, USA, Oregon, USA | |
Lucy | AWS / AI Service | AI Cloud Service | AI Cloud Service | N. Virginia, USA, Ohio, USA | |
Lucy | Canva | Design of posting | Design of posting | AWS | |
Lucy | Chameleon | In-App Messaging | In-App Messaging | N. Virginia, USA, Ohio, USA | |
Lucy | Cloudflare | Cloud Application Firewall | Cloud Application Firewall | Worldwide www.cloudflare.com/network | |
Lucy | Customer IO | Out-of-App Messaging | Out-of-App Messaging | Google Cloud US Datacenter | |
Lucy | Dropbox | Cloud Storage | Cloud Storage | AWS, Azure, and Google | |
Lucy | Google Cloud AI | AI Cloud Service | AI Cloud Service | Google Cloud US Datacenter | |
Lucy | Google Mail | Gmail | Gmail | Google Cloud US Datacenter | |
Lucy | Hubspot | Marketing Platform | Marketing Platform | AWS | |
Lucy | IBM Cloud | Cloud Services | Cloud Services | DC, VA, & Dallas | |
Lucy | Jumpcloud | Directory, Security, & SSO | Directory, Security, & SSO | Boulder Colorado | |
Lucy | Knowbe4 | Security Training Platform | Security Training Platform | AWS | |
Lucy | Lunaweb GmbH d.b.a. CloudConvert | Ingestion Compatibility (.key and .pages files) | Ingestion Compatibility (.key and .pages files) | Germany | |
Lucy | Microsoft Azure Hosting & AI | Hosting, AI Cloud Service, O365, Teams | Hosting, AI Cloud Service, O365, Teams | Virginia, Washington, Iowa, USA | |
Lucy | Open AI | Create AI/ML applications | Create AI/ML applications | Microsoft Cloud | |
Lucy | Salesforce | CRM and Marketing | CRM and Marketing | AWS & Azure | |
Lucy | SendGrid | Customer Communications platform | Customer Communications platform | Herndon, VA; Las Vegas, NV; and Chicago, IL. | |
Lucy | Site24x7 | Performance monitoring | Performance monitoring | Kansas – US, Virginia – US, New York – US, Los Angeles – US, Toronto – CA, Vancouver – CA | |
Lucy | Slack | Messaging App | Messaging App | AWS | |
Lucy | Sophos | Endpoint Security | Endpoint Security | AWS | |
Lucy | Workplace | Messaging App & Community | Messaging App & Community | Eagle Mountain, Utah | |
SmartAction | Alchemy-Quadranet | Datacenter | Datacenter | USA | |
SmartAction | AmazonAws | Cloud provider | Cloud provider | USA | |
SmartAction | Bandwidth | SIP provider | SIP provider | USA | |
SmartAction | Digital Realty | Datacenter | Datacenter | USA | |
SmartAction | GoogleMaps | Address and GPS API provider | Address and GPS API provider | USA | |
SmartAction | HPSupport | hardware | hardware | USA | |
SmartAction | Hubspot | Marketing | Marketing | USA | |
SmartAction | Intelepeer | SIP provider | SIP provider | USA | |
SmartAction | MapBox | Map UI provider | Map UI provider | USA | |
SmartAction | MS Metaswitch | Monitoring | Monitoring | London, UK | |
SmartAction | MSAzure | Cloud provider | Cloud provider | USA | |
SmartAction | QuickBooks | Accounting | Accounting | USA | |
SmartAction | SalesForce | CRM | CRM | USA | |
SmartAction | Service Objects | 411 Lookup | 411 Lookup | USA | |
SmartAction | SHI | Desktop Support – Licensing | Desktop Support – Licensing | USA | |
SmartAction | Site24x7 | Monitoring | Monitoring | USA | |
SmartAction | Splunk | Monitoring | Monitoring | USA | |
SmartAction | Twilio | SMS | SMS | USA | |
SmartAction | VictorOps | Monitoring | Monitoring | USA | |
SmartAction | VMWare | Backups | Backups | USA | |
SmartAction | VoiceCloud | Transcription Service | Transcription Service | USA | |
LumenVox | AWS | USA | |||
LumenVox | Google Cloud Services | USA | |||
LumenVox | MongoDB | USA | |||
CereProc | AgileCRM | Customer information for support, sales, marketing | Customer information for support, sales, marketing | USA | |
CereProc | Amazon Web Services | Customer information, text data input to the CereVoice Cloud, audio data output from CereVoice Cloud, audio data from CereVoice ME | Customer information, text data input to the CereVoice Cloud, audio data output from CereVoice Cloud, audio data from CereVoice ME | USA | |
CereProc | Apple | App Store customer information | App Store customer information | USA | |
CereProc | Clook Internet | CereProc, website user information, customer orders, CereProc email | CereProc, website user information, customer orders, CereProc email | London, UK | |
CereProc | Website analytics | Website analytics | USA | ||
CereProc | Play Store customer information | Play Store customer information | USA | ||
CereProc | Paypal | Customer information for payment processing | Customer information for payment processing | USA | |
CereProc | Xero | Customer information for accounting purposes | Customer information for accounting purposes | USA | |
Denim | AWS | USA | |||
Denim | DataDog | USA | |||
Denim | IBM | USA | |||
Denim | MongoDB | USA |
Duration of processing: For each sub-processor above, processing of personal data will be for the duration that the customer uses and continues to use the applicable features of the Capacity platform, and for the retention periods as set out in customer’s agreement with Capacity.
Our Services Agreement: Capacity’s Services Agreement generally provides that Subscriber may authorize and provide access to the Platform and Platform Services (both as defined therein) to individuals, affiliates of Subscriber (including their users) or another entity (including its users) through Subscriber’s Account and as contemplated in Service Order(s) (“Users”) through a Subscriber account (“Account”). Subscriber is solely responsible for all use of the Account and all Services through the Account by each User.
Furthermore, in the Services Agreement, Subscriber represents, warrants, and covenants to Capacity (among other things) that: (i) it owns or otherwise has and will maintain sufficient rights in the Subscriber Data (as defined therein) to grant to Capacity the rights granted therein to access, use, disclose, store and process the Subscriber Data; and (ii) it has and will maintain the applicable permissions, authorizations, and consents (via its employee handbook privacy, policy or otherwise) for Capacity to access, use, disclose, store and process the Subscriber Personal Information and other Subscriber Data as permitted thereunder.