CrowdHandler’s Data Sub-processors

CrowdHandler utilizes third-party sub-processors to assist in delivering services to our customers. We conduct due diligence evaluations of all sub-processors prior to onboarding them to handle personal data on our behalf. Any sub-processor handling customer data is contractually bound to only process information as instructed and to implement appropriate security controls to safeguard data in their care.

Our primary sub-processors include:

Amazon Web Services (AWS)#

We use AWS as our cloud hosting provider to store, process and transmit data to support our application, website and DNS services. AWS handles basic personal data including IP addresses, email addresses, and technical session details. AWS is certified under multiple compliance frameworks like ISO 27001, HIPAA, PCI and SOC demonstrating security controls in place. Data remains within the United Kingdom.

Stripe#

We use Stripe as our payment processor to handle billing information and payments. Stripe collects and stores credit card data and other billing details to process subscription payments for our services. Stripe is PCI compliant and data remains within the European Economic Area.

Mailchimp#

We use Mailchimp as our email service provider to distribute email communications to clients and individuals who have consented to receive marketing information. Mailchimp is certified under the EU-US and Swiss-US Privacy Shield and has global data centers for compliance. Data remains within the European Economic Area.

FreshDesk#

We use FreshDesk to provide email support and customer relationship management. FreshDesk has access to basic personal data like email addresses, company names, and other profile information to assist support teams. FreshDesk is certified under ISO 27001 and SOC 2. Data remains within the United States.

Google Analytics#

We use Google Analytics to gain insights into how our website and applications are used. Google collects technical details and patterns to provide us with statistics anonymously. Data is retained under Google's retention schedules. No personal data is transmitted to Google directly from our services.