Subscribe to an RSS feed to be notified when we add new Capacity sub-processors (note: you will need to cut and paste the “Subscribe to an RSS feed” URL into an RSS Feed Reader to monitor updates).
Capacity uses certain sub-processors to assist in providing Capacity’s services. A sub-processor is a third-party company engaged by Capacity to process data, which may include customers’ personal data (i) on behalf of Capacity customers; (ii) in accordance with customer instructions as communicated by Capacity (typically as set out in Capacity’s Services Agreement with its customers); and (iii) in strict accordance with the terms of a written contract between Capacity and the sub-processor.
Generally, Capacity contractually obligates its sub-processors to implement appropriate technical and organizational measures to ensure that the sub-processing of data is protected to the standards required by applicable data protection laws. Further information relating to sub-processor security measures can be found via the external links below and by reviewing such sub-processors’ websites.
Where the engagement of a sub-processor requires the cross-border transfer of personal data, Capacity has performed transfer impact assessments for such data transfer or otherwise complied with applicable data protection laws.
Capacity maintains an up-to-date list of the names and locations of all sub-processors below. Capacity customers may check this page for updates to sub-processors.
| Sub-processor | Applicable Capacity Service(s) | Subject matter of processing | Nature and purpose of processing | Location |
|---|---|---|---|---|
| Adobe | Marketo | Client personal contact data | Client Support | USA |
| AWS | Infrastructure Provider — all Capacity services | Personal data contained in communication and knowledge base sent through Capacity’s services | Infrastructure Provider providing hosting services and storage. | USA |
| Beamer | Product update notifications | Capacity account details | Notifying clients of new features and updates, allowing submissions of product feature requests, NPS | USA |
| Clumio | Data Backup | Personal data contained in communications and knowledge base sent through Capacity’s services | Data Recovery Solution | USA |
| Datadog | Log Monitoring | Data Logs | Infrastructure Status Monitoring | USA |
| Google LLC | Personal data contained in emails. | Email service provider | USA | |
| Hubspot | SalesForce | Client personal contact data | Client Support | USA |
| Lacework | IDS | Network Data | Network Security | USA |
| Mailgun | Platform Email Features | Personal data contained in emails | Routing and transmission of emails | USA |
| Maxio, LLC | Service Invoices | Information contained in invoices | Automated invoice delivery | USA |
| OpenAI | AI content generation | Client queries sent through ChatGPT services | Optional configuration for AI enrichment | USA |
| SalesForce | SalesForce | Client personal contact data | Client Support | USA |
| Sentry.io | Performance Monitoring | Exception logging | Error tracking and performance monitoring | USA |
| Slack Technologies | Instant messaging | Personal data contained in instant messages. | Instant Messaging service provider | USA |
| Stripe, Inc. | Credit card payment processing. | Credit card processing information | Customers submit information directly to Stripe for payment services. | USA |
| Tableau | Tableau | Data contained in analytics | Data analytics functionality for clients | USA |
| Userpilot, Inc. | Self service activation | Personal data provided during product enrollment. | Automated customer onboarding (checklists, popup guides) and user information | USA |
| Zoom | Zoom | Video and Audio Data | Client Support | USA |
| 3NNUX | Customer Success | Customer organization configuration | Customer onboarding and support | Philippines |
Duration of processing: For each sub-processor above, processing of personal data will be for the duration that the customer uses and continues to use the applicable features of the Capacity platform, and for the retention periods as set out in customer’s agreement with Capacity.
Our Services Agreement: Capacity’s Services Agreement generally provides that Subscriber may authorize and provide access to the Platform and Platform Services (both as defined therein) to individuals, affiliates of Subscriber (including their users) or another entity (including its users) through Subscriber’s Account and as contemplated in Service Order(s) (“Users”) through a Subscriber account (“Account”). Subscriber is solely responsible for all use of the Account and all Services through the Account by each User.
Furthermore, in the Services Agreement, Subscriber represents, warrants, and covenants to Capacity (among other things) that: (i) it owns or otherwise has and will maintain sufficient rights in the Subscriber Data (as defined therein) to grant to Capacity the rights granted therein to access, use, disclose, store and process the Subscriber Data; and (ii) it has and will maintain the applicable permissions, authorizations, and consents (via its employee handbook privacy, policy or otherwise) for Capacity to access, use, disclose, store and process the Subscriber Personal Information and other Subscriber Data as permitted thereunder.