---
title: "55 Degrees Sub-Processors and Suppliers"
canonical: "https://support.55degrees.se/space/SECURE/2014216193/55%20Degrees%20Sub-Processors%20and%20Suppliers"
format: markdown
---
At 55 Degrees, we are committed to protecting our customers' data. This page provides a transparent list of our sub-processors and suppliers who may handle customer data on our behalf. Our selection and management of these partners are guided by our commitment to information security and data privacy, aligning with the standards of **ISO 27001, SOC 2, DORA and the GDPR**.
All listed sub-processors are subject to a thorough security and risk assessment to ensure they meet our high standards for data protection.
### Notification of Changes
We are committed to notifying our customers of any changes to our sub-processors. We will update this page and notify key customer contacts via email at least **30 days** before engaging any new sub-processor that may process customer data.
### Our Sub-Processors & Suppliers
Below is a list of third-party companies that process data, which may include personal data, on behalf of 55 Degrees.
- **Data Handling**: Each sub-processor handles data in strict accordance with the terms of a written contract and our customers' instructions.
- **Scope**: This list includes only sub-processors to whom we send personal or user-generated data. Other vendors that do not process customer data are not listed.
- **Security Review**: We regularly review all sub-processors to ensure their technical and organisational measures meet the standards required by applicable data protection laws. Links to their security measures are provided below.
- **Processing Duration**: Personal data will be processed for the duration that the customer uses the applicable service and for the retention periods outlined in our privacy policies and customer agreements.
- **Relevance**: Not all suppliers listed will be relevant to your specific usage of our tools. We have created sections to help you identify the suppliers relevant to your services.
---
### Product Usage
Relevant 55 Degrees privacy policies: [https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se](https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se). Our [DPA](https://www.55degrees.se/agreement-cloud-products), located in our customer agreement, is also relevant here.
| **Supplier** | **Which App(s)?** | **Purpose for the Processing or Storage** | **Which Data?** | **When?** | **Where?** | **Vendor Links** |
| --- | --- | --- | --- | --- | --- | --- |
| Amazon AWS | All Cloud Apps | Hosting Logs (S3 Global, CloudFront) | - IP address | When you use our Cloud applications | Global (Data stored in region of user) | [DPA](https://d1.awsstatic.com/legal/aws-dpa/aws-dpa.pdf) | [Supplementary Addendum](https://d1.awsstatic.com/legal/aws-dpa/supplementary-addendum-to-the-aws-dpa.pdf) | [UK Addendum](https://d1.awsstatic.com/legal/aws-dpa/aws-uk-gdpr-dpa.pdf) |
| All Cloud Apps | Storage for configurations required for operation of applications or features. | - User Account IDs (a pseudonymized string) | Depending on configurations required for providing functionality. | EU (Frankfurt)
Options for those eligible for data residency:
- US (N. Virginia)
- Australia (Sydney) |
| Standalone SaaS Apps | Authorization for OAuth connections to work management systems like Jira Cloud | - OAuth Access Token (encrypted) | When you use an OAuth based wizard to connect to your work management system | EU (Frankfurt) |
| Apps in Azure DevOps | Processing authorization for our embedded Azure app. | - Azure authenticated User ID | When you access ActionableAgile within your Azure DevOps Services instance | EU (Frankfurt) |
| DataDog | All Cloud Apps | Compliant log aggregation/management and security monitoring | | When you use our Cloud applications | EU (Germany) | [DPA](https://www.datadoghq.com/legal/data-processing-addendum) | [Privacy](https://www.datadoghq.com/legal/privacy/) |
| Google Cloud (Firebase)
[replacing with AWS] | Apps in Azure DevOps | Storage of Authorized User Information. | - Azure authenticated User ID | When you access our products within your Azure DevOps Services instance | EU | [DPA](https://cloud.google.com/terms/data-processing-addendum) | [Privacy](https://firebase.google.com/support/privacy) |
| Google Cloud (Firebase)
[replacing with AWS] | Our Standalone SaaS Apps | User Authentication
Processing/Storage of Authorized User Information. | - Identifier (Email Address)
- Authentication Provider Used
- Created Date
- Last logged-in date
- Unique User ID | When you log into ActionableAgile Analytics ([https://analytics.actionableagile.com](https://analytics.actionableagile.com) ) | EU | [DPA](https://cloud.google.com/terms/data-processing-addendum) | [Privacy](https://firebase.google.com/support/privacy) |
| MixPanel | All Cloud Apps | Product Usage Analytics | - Subscription ID
- Email domain of billing contact
- Product Event information
- Information about the computer, browser, and session length
- Referrer URL/Domain | When you use our Cloud applications (not relevant for Server or Data Center Customers) | EU | [DPA](https://mixpanel.com/legal/dpa/) | [Privacy](https://mixpanel.com/legal/privacy-policy/) |
| Product Fruits | All Cloud Apps | In-App User Help and Messaging (General and Context-Specific)
Measuring usefulness of in-app user help and messaging. | - Unique user ID
- Interaction analytics
- Key user actions (to display contextual user messaging) | When you use our Cloud applications | EU | [DPA](https://productfruits.com/policies/gdpr) | [Privacy](https://productfruits.com/policies/privacy) |
| Sentry
[replacing with data dog] | All Cloud Apps | Error logging and handling | - Organization’s subscription ID
- Information about the user’s computer, browser | When you experience a javascript error while using one of our Cloud applications | USA | [DPA](https://sentry.io/legal/dpa/) | [Privacy](https://sentry.io/privacy/) |
### General Communication & Billing
All 55 Degrees privacy policies contain relevant purposes: [https://www.55degrees.se/legal/privacy/marketing?hsLang=en-se](https://www.55degrees.se/legal/privacy/marketing?hsLang=en-se) [https://www.55degrees.se/legal/privacy/websites?hsLang=en-se](https://www.55degrees.se/legal/privacy/websites?hsLang=en-se) [https://www.55degrees.se/legal/privacy/suppliers?hsLang=en-se](https://www.55degrees.se/legal/privacy/suppliers?hsLang=en-se) [https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se](https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se) [https://www.55degrees.se/legal/privacy/complaints?hsLang=en-se](https://www.55degrees.se/legal/privacy/complaints?hsLang=en-se)
| **Supplier** | **Purpose for the Processing or Storage** | **Which Data?** | **When? ** | **Where?** | **Vendor Links** |
| --- | --- | --- | --- | --- | --- |
| Docusign | Signing digital documents | - Name
- Email address
- Signature
- Signature Date
- Location
- Other information as required to fill in the document. | When you request access to restricted documents on [http://trust.55degrees.se](http://trust.55degrees.se) or if we otherwise, during our interactions, require the signing of digital documents. | EU | [DPA](https://www.docusign.com/legal/terms-and-conditions/schedule-docusign-signature/attachment-data-protection) | [Certifications](https://www.docusign.com/trust/compliance/certifications) | [Privacy](https://www.docusign.com/privacy) |
| Google Ireland
(Google Workspace, including Email) | Customer Email Communication | - Email subjects,
- Email bodies,
- Email attachments,
- Email senders,
- Email message recipients | When you email us. | All data is stored at rest in Europe.
[What data is covered by a data region policy?](https://support.google.com/a/answer/9223653?amp;rd=1&product_name=UnuFlow&visit_id=638048137949688124-3524331817&rd=2&src=supportwidget0) | [DPA](https://admin.google.com/terms/apps/6/2/en/dpa_terms.html) | [Privacy](https://policies.google.com/privacy?hl=en-US) |
| Kleer Group AB
(HQ: Sweden) | Quoting and Invoicing for customers paying by wire transfer | - Email address(es)
- Full Name
- Organization Name & VAT number
- Billing Address | When you request a quote or an invoice for products or services sold directly from 55 Degrees. | EU | DPA upon request | [Privacy](https://www.kleer.se/privacy-policy/) |
| Microsoft (Teams, OneDrive) | Video Meetings and Recording storage | - Name and Email address of those registered for, and attending, a meeting
- Chat logs
- Video recordings (only upon consent of attendees) | When you register for or attend, a meeting hosted on the service. | EU | [DPA](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA?lang=1) | [Privacy](https://privacy.microsoft.com/en-us/privacystatement) |
| Quaderno | SaaS VAT/Tax Compliance Service | - *Personal identification data*: full name, address, phone number, and email address.
- *Financial data*: tax ID, VAT number, bank account number, invoices, and credit notes.
- *Device-specific data*: IP address (to comply with EU VAT rules for e-services). | When you purchase a paid course or other plans within the community | EU (Amsterdam)
*via **[Digital Ocean](https://www.digitalocean.com/legal/privacy/)**’s data center* | [DPA](https://support.55degrees.se/space/SECURE/2014216193) | [Privacy](https://www.quaderno.io/policies/privacy) |
| Recurly | Subscription Management, including selected Transactional Emails | - Email address(es)
- Full Name
- Organization Name & VAT number
- Billing Address
- Credit Card Information
- Coupons applied
- Account notes
- Audit log of account management actions
- Audit log of system-generated emails sent to the customer | When you start, update, or cancel an evaluation or paid subscription for ActionableAgile Analytics ([https://analytics.actionableagile.com](https://analytics.actionableagile.com) ) or ActionableAgile for Azure DevOps. | USA | [DPA](https://go.recurly.com/rs/439-LSC-903/images/Recurly-EU-Personal-Data-Processing-Agreement.pdf) | [Privacy](https://recurly.com/legal/privacy/) |
| Stripe | Credit card payment processing | - Email address(es)
- Full Name
- Organization Name & VAT number
- Billing Address
- Credit Card Information | Upon purchase or renewal of a paid subscription for ActionableAgile Analytics ([https://analytics.actionableagile.com](https://analytics.actionableagile.com) ) or ActionableAgile for Azure DevOps.
---
Upon purchase or renewal of a paid course or plan for the Community Site. | USA | [DPA](https://stripe.com/en-se/legal/dpa) | [Privacy](https://stripe.com/en-se/privacy) |
| Zoom | Video Meetings
Meeting Recording storage
Meeting Scheduling Service | - Name and Email address of those registered for, and attending, a meeting
- Chat logs
- Video recordings (only upon consent of attendees) | When you register for or attend, a meeting hosted on the service. | USA (data at rest)
EU (data in transit) | [DPA](https://explore.zoom.us/docs/doc/Zoom_GLOBAL_DPA.pdf?_ga=2.251769289.195750321.1646675462-801897819.1598290790) | [Privacy](https://explore.zoom.us/en/privacy/) |
### Marketing, Sales, Customer Success
Relevant 55 Degrees privacy policies: [https://www.55degrees.se/legal/privacy/websites?hsLang=en-se](https://www.55degrees.se/legal/privacy/websites?hsLang=en-se) [https://www.55degrees.se/legal/privacy/marketing?hsLang=en-se](https://www.55degrees.se/legal/privacy/marketing?hsLang=en-se) [https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se](https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se)
| **Supplier** | **Purpose for the Processing or Storage** | **Which Data?** | **When?** | **Where?** | **Vendor Links** |
| --- | --- | --- | --- | --- | --- |
| Hubspot | To manage customer relationships across the full lifecycle — including marketing email communications and unsubscribe management, lead management, evaluations, onboarding, active subscriptions, renewals, and retention. | - Name and email address for account contacts, power users, and marketing subscribers
- Date and method of consent, mailing list subscriptions, and unsubscribe requests/preferences
- A record of activities, communications, and engagement with users associated with an account
- Evaluation, subscription, and renewal information (application, term, dates, status)
- Customer health and retention-related notes
- Optional information provided such as company and relevant interests | When you subscribe to our mailing lists, engage with our marketing communications, or engage with us about an evaluation, subscription, or ongoing use of one of our apps. | EU (Germany) | [DPA](https://legal.hubspot.com/dpa) | [Privacy](https://legal.hubspot.com/privacy-policy) |
| Startdeliver AB
[thru Dec 31, 2026] | Managing Customer Relationships and Success | - Name and Email address for crucial account contacts and power users
- A record of activities with and emails to/from users associated with an account
- Subscription information (application, term, date paid, cost, etc.) | When your information is provided to us as a key contact for a new or existing subscription or evaluation.
When you communicate/interact with us regarding your organization’s subscription or evaluation. | EU | DPA upon request | [Privacy](https://support.startdeliver.com/en/articles/4782038-privacy-policy) |
| Navattic | Understand the effectiveness of our interactive product demos | - Pseudonymized identifier
- information about how you interacted with our demo videos | When you view or interact with a product demo on our marketing websites. | USA | [DPA](https://www.navattic.com/legal/data-processing-agreement) | [Privacy](https://www.navattic.com/legal/privacy) |
| WIX | Website Creation and Hosting Provider | - WIX automatically collects information such as IP address, browser, OS, etc. | When you visit our website at [https://55degrees.se](https://55degrees.se) | USA, EU, Japan, Israel (depending on what the information is and if WIX is using a subprocessor). | [DPA](https://www.wix.com/about/privacy-dpa-users) | [Privacy](https://www.wix.com/about/privacy) | [Cookie Policy](https://www.wix.com/about/cookie-policy) | [ISO 27001 Compliance](https://support.wix.com/en/article/security-of-wixs-billing-services-and-pci-compliance#iso-compliance) |
| Wordpress by Automattic | Website Creation and Hosting Provider. Services used:
- [http://wordpress.com](http://wordpress.com)
- Akismet
- Jetpack | - Wordpress automatically collects information such as IP address, browser, OS, etc for their hosting logs. | When you visit our website at [https://actionableagile.com](https://actionableagile.com) | USA | DPA upon request | [Privacy](https://automattic.com/privacy/) |
### Product Support & Enablement
Relevant 55 Degrees privacy policy: [https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se](https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se)
| **Supplier** | **Purpose for the Processing or Storage** | **Which Data?** | **When?** | **Where?** | **Vendor Links** |
| --- | --- | --- | --- | --- | --- |
| Arcade | Understand the effectiveness of our interactive product tutorials | - Pseudonymized identifier
- Hotspot interactions
- CTA clicks
- Step progress | When you decide to play an interactive product tutorial | USA | [DPA](https://www.arcade.software/dpa) | [Privacy](https://www.arcade.software/privacy) |
| Jira Service Management (Atlassian Corporation Plc) | Customer Support Request Management | - Name and Email address
- Organization name
- Email address for issue participants
- Content added to support requests | Upon support request creation. | EU/EEA (primary)
USA (subset of core data) | [DPA](https://www.atlassian.com/legal/data-processing-addendum) | [Privacy](https://www.atlassian.com/legal/privacy-policy) | [Data Transfer Impact Assessment](https://www.atlassian.com/legal/data-transfer-impact-assessment) |
| Refined | Customer Support Request Management | - User ids of logged-in users
- IP address of site visitors (logged for 2 weeks)
The following data is processed, but not stored
- Personally identifiable information.
- Login credentials - authentication through Atlassian.
- Atlassian Content - fetched on demand for the user requesting the data, never cached. | When you visit our support portal.
When you enter and manage support requests. | EU | DPA upon request | [Privacy](https://refined.com/privacy-policy/) |
| Released | Understanding user needs and validating new ideas. | Only data the user explicitly supplies for this purpose:
- Name
- Email
- Company
- User-entered information about desired or proposed product features | When you interact with our product roadmaps by commenting on an existing idea or submitting a new idea. | USA
(AWS US East) | [DPA](https://docs.released.so/legal/data-processing-addendum) | [Trust Center](https://trust.released.so/) |
### Training and Workshops
Relevant 55 Degrees privacy policy: [https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se](https://www.55degrees.se/legal/privacy/customer-employees?hsLang=en-se)
| **Supplier** | **Purpose for the Processing or Storage** | **Which Data?** | **When?** | **Where?** | **Vendor Links** |
| --- | --- | --- | --- | --- | --- |
| Automation Consultants (UK) | Administrate attendance
Communicate with participants | - Name
- E-mail address
- Information about which company you represent
- Position in your company *(optional)*
- Former workshops you have participated in | Following registration for a workshop. | UK | [Privacy](https://www.automation-consultants.com/our-privacy-policy/) | [Trust Center](https://trust.automation-consultants.com/) |
| Dropbox | File sharing with workshop attendees | - Company Name
- Recording of the training | When we need to share large files and the use of Google Drive is prohibited by the employer | USA | [DPA](https://assets.dropbox.com/documents/en/legal/dfb-data-processing-agreement.pdf) | [Privacy](https://www.dropbox.com/privacy) | [Data Storage](https://help.dropbox.com/security/physical-location-data-storage) |
| Microsoft (Teams, OneDrive) | Video Meetings and Recording storage | - Name and Email address of those registered for, and attending, a meeting
- Chat logs
- Video recordings (only upon consent of attendees) | When you register for or attend, a meeting hosted on the service - only when attendees are not able to use Zoom. | EU | [DPA](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA?lang=1) | [Privacy](https://privacy.microsoft.com/en-us/privacystatement) |
| Mighty Networks | Community Platform Provider (SaaS) | - Membership and Profile Information
- Your Content
- Communication
- Date, time, browser, device type, operating system, and originating IP address | When you use our community platform to interact with others in a space dedicated to the training or workshop you’re enrolled in. | USA | [DPA](https://www.mightynetworks.com/dpa) | [Remove your data](https://faq.mightynetworks.com/hc/en-us/articles/204991129?_ga=2.133656458.508660165.1664975171-1014188197.1664281134) | [Privacy](https://www.mightynetworks.com/privacy-policy) | [EU/EEA/UK Privacy](https://www.mightynetworks.com/eu-privacy-notice) | [Cookie Policy](https://www.mightynetworks.com/cookie-policy) |
| Mural | Collaboration / Digital Whiteboarding Platform (SaaS) | - Contact info (including name, email) [optional]
- Profile info (including employer, job title, location, team, role) [optional]
- Device identifiers (including IP address)
- User Generated Content | When you join a mural whiteboard to participate in a workshop. | USA | [DPA](https://www.mural.co/terms/data-processing-addendum) | [Privacy](https://www.mural.co/terms/privacy-policy) |
| ProKanban | Training curriculum provider and certification body | - Name
- Email
- Course taken
- Date(s) of course taken | When we send a list of candidates that are available for a free certification exam. | USA | |
---
Change Log
**Aug 26, 2026:** removed Productboard. Removed upcoming lozenge from Released. Added deprecation date for Startdeliver. Removed Brevo. Updated Hubspot as CRM for the full customer lifecycle, marketing email communications, and unsubscribe management. Moved customer success suppliers into the section now named *Marketing, Sales and Customer Success*, Changed *Customer Success & Support* section name to *Product Enablement & Support*.
**Dec 3, 2025: **noted that Productboard usage will cease on Dec 4, 2025. Added Released to replace Productboard effective on Dec 3, 2025.
**Sep 18, 2025: **added links to relevant 55D privacy policies for each section to make it easier for customers to get more information relevant to the specific set of processors.
**Aug 18, 2025:** rewrote preface to tables so that the information is clear and easy to consume. Added notification period of 30 days.
**Aug 14, 2025:** Updating organization of document sections. Adding Arcade to customer care and Navattic to marketing. Adding Docusign to General. Adding productboard to Customer Support & Success. changing notes to vendor links.
**May 14, 2025: **Added Dropbox for our workshop attendees (if they request it because they cannot use Google Drive).
**May 8, 2025: **Swapped out Visma for Kleer for our accounting system which handles customer invoicing. Removed outgoing platform Planhat.
**October 23, 2024: **Adding information about AWS Data Residency for Jira Cloud, Adding information about storage for features in Azure.
**October 14, 2024:** Adding Automation Consultants as a training partner who will deliver some of our customer workshops.
**September 2, 2024:** Adding startdeliver CSM tool which will replace planhat over the next few months. Removed all references to Google Firebase Functions in the US for Azure users.
**July 19, 2024:** Removed [Scrum.org](http://Scrum.org) as a sub-processor, added additional data to Product Fruits sub-processor (marked NEW), noted the planned replacement of Google firebase functions in US with AWS in EU for Azure users starting September 1, removed references to standalone labs as that has been decommissioned..
**April 15, 2024: **Removed Calendly as a sub-processor, Added Product Fruits for our Cloud products.