List of Sub Processors

Below is a list of sub-processors we work with and the purpose for why we use their services.
 
 
Name Location Processing Activity Does the sub-processor process respondent personal data and why?
Amazon Web Service (AWS) UK Hosting of Commonplace Platforms

Does process personal respondent data. We need this data in order to deliver our service including providing profile pages for each user, and being able to communicate with them if consented. Data is not pseudonymised.

Appcues
US Analytics and guidelines

Does not process personal respondent data. The sub-processor only tracks engagement partner user events happening in the application to provide them with curated guidelines and tips on how to use and improve their Commonplaces.

BlockSurvey India Custom questionnaires

Yes. The sub-processor only allows to gather custom questionnaire answers which are then included and processed in our product.

Churn Zero US Customer usage data Does not process any respondent personal data.
Cloudinary US Image storage Does not process any respondent personal data.
Delighted US Customer and end user feedback Does process personal respondent data. This is our Net Promoter Score service, which gives us feedback from respondents. It requires the respondent email address to send them a survey email.
Gleap Germany / Netherlands User feedback Does not process any respondent personal data. The sub-processor processes feedback provided by engagement partner users about their Commonplaces. Neither the tool, nor the data, is accessible to respondent users.
Google US Gmail and Google Drive for Commonplace operational purposes Does not process any respondent personal data.
Helpscout US Support Systems Does process personal respondent data. Personal data from respondents who write to support@commonplace.is is processed. We need to know their email address in order to reply.
Hubspot US Marketing website and associated tools Does not process any respondent personal data.
Logrocket US Site Analytics

Processes pseudonymised respondent data: the data can be used to differentiate individuals but not to identify them.

Mixpanel US Site Analytics

Processes pseudonymised respondent data: the data can be used to differentiate individuals but not to identify them.

MongoDB Atlas UK Database provider (also hosted on AWS)

Does process personal respondent data. We need this data in order to deliver our service including providing prolife pages for each user, and being able to communicate with them if consented. Data is not pseudonymised.

Sendgrid US Email automation of end-user emails from the platform (e.g. notifications and address verification) Does process personal respondent data. Sends emails to respondents from the Commonplace platform. To do this it needs to capture and process personal data in the form of email addresses. Data is pseudonymised after 30 days.
Zoom US Online meeting and webinar services Does process personal respondent data. An optional service that customers can choose to offer to respondents for hosting meetings or webinars. If used, respondent email addresses are processed to send invitations and manage the webinar access.

Your concerns

If you have any concerns about our data processors or any questions about the information features on this page, please contact privacy@commonplace.is

Page last updated 11.11.2022