Snapshot 21890
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Cyberday subprocessors This document describes the service providers participating in the Cyberday Inc. service process, who have a role in processing the data related to Cyberday. This description is updated regularly to reflect any changes in the supply chain. Last updated 13.12.2024. Subprosessor Role Location Salesforce.com, Inc. Server capacity EU (Ireland) Data storage location: EU (Ireland) Data processing location: EU, USA Processing role: Maintaining and offering Heroku-server platform Processed data: Offering capacity, no role in proper data processing Contract about processing: Cloud service order, annex SALESFORCE DATA PROCESSING ADDENDUM The service provider is listed in EU-U.S. Data Privacy Framework. Processing purpose: Heroku-platform is used for operating system level services on which code produced by Agendium runs. The objective of this setup is to allow working services while making sure operating system level services are secure and up to date. Microsoft Corporation Server capacity EU (Ireland) Data storage location: EU (Irlanti) Data processing location: EU, Yhdysvallat Processing role: Offering Azure-platform to be base for service provided by Agendium Processed data: Offering processing capacity, no role in proper data processing Contract about processing: Cloud service order, annex Online Services Data Protection Addendum. The service provider is listed in EU-U.S. Data Privacy Framework. Processing purpose: Microsoft Azure-platforms different components are used to provide and maintain services. Amazon Web Services Storage capacity EU (Germany) Data processing location: EU Processing role: Cloud infrastructure and hosting provider Processed data: Customer data required for hosting Cyberday Contract about processing: AWS Service Agreement, Data Processing Addendum and European Sovereign Cloud Addendum Processing purpose: Providing the cloud infrastructure used to host and operate Cyberday. Auth0, Inc. Authentication platform EU Data processing location: EU, USA Processing role: Securing authentication and storing authentication information when Teams-environment is not used Processed data: Authentication information used in the service Contract about processing: Cloud service order, annex AUTH0 DATA PROCESSING ADDENDUM The service provider is listed in EU-U.S. Data Privacy Framework. Processing purpose: When authentication is done using Cyberday user account, Auth0 authenticates the user with authentication methods chosen by the user. Intercom R&D Unlimited Company Chat-service USA Data processing location: USA Processing role: Archiving support chat conversations Processed data: User identification info, support chat conversations Contract about processing: Cloud service order, annexINTERCOM DATA PROCESSING ADDENDUM The service provider is listed in EU-U.S. Data Privacy Framework. Processing purpose: The customers use of Cyberday is supported with chat support and by informing customers about the latest development in the service. Twilio, Inc. SMS message API USA Data processing location: USA Processing role: Sending one time use passwords in a text message Processed data: User phone number Contract about processing: Cloud service order, annex TWILIO DATA PROCESSING ADDENDUM The service provider is listed in EU-U.S. Data Privacy Framework. Processing purpose: Enabling text message authentication, when Microsoft Teams is not used The Rocket Science Group (MailChimp) Email API USA Data processing location: USA Processing role: Sending emails and saving log data Processed data: User email Sopimus käsittelystä: Cloud service order, annex MAILCHIMP DATA PROCESSING ADDENDUM The service provider is listed in EU-U.S. Data Privacy Framework. Processing purpose: Delivering email invites to users by admins and tracking delivery status Microsoft Corporation Authentication platform USA Data processing location: USA Processing role: Authenticating to the service in Teams environment Processed data: Teams-ID, Azure AD -ID Processing purpose: With Microsoft-managed organisation and user Teams and Azure AD credentials, the Cyberday user is linked to the correct Cyberday content without creating separate credentials. Datadog Inc. Monitoring and analytics USA Data processing location: USA Processing role: Operational security monitoring Processed data: User's email address and browser details, IP address, event logs on the service Contract about processing: Cloud subscription, enclosed DATADOG DATA PROCESSING ADDENDUM EU-U.S. Data Privacy Framework -registered operator Processing purpose: Datadog is used to collect and analyse log data related to the service, for example to identify possible nonconformities and ensure performance. Stay up-to-date on cyber security Subscribe for our free, weekly newsletter Get a weekly digest with most important cybersec news, new Academy content and next week's free webinars. Kiitos! Saat vielä vahvistuksen sähköpostiisi. Valitettavasti tietojasi ei voitu lähettää eteenpäin. * Your email won't be sold nor disclosed forward. Confirmation has more info. Learn more Effortless compliance improvement Widest framework library in EU Extensive support Get your compliance foundation in minutes. Learn what an AI-powered ISMS looks like in practice. Start a free trial and see your compliance work launch in minutes. Start free trial Book a meeting Pysy kärryillä digiturvasta Tilaa Digiturvauutiset sähköpostiisi Tiimimme seuraa jatkuvasti kymmeniä uutislähteitä maailmalta ja toimittaa tärkeimmät digiturvauutiset sähköpostiisi viikottain. Kiitos! Saat vielä vahvistuksen sähköpostiisi. Valitettavasti tietojasi ei voitu lähettää eteenpäin. * Osoitetta ei myydä tai luovuteta eteenpäin. Vahvistusviestissä lisätietoja. Lue lisää HomePricingTeamSecurityCustomersBook a meetingBook a demoLogin How it works? SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templatesTrust center Use cases By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018 By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementPrivacy managementVendor assessmentsInternal audits Resources AcademyWebinarsBlogHelp articlesVideo coursesTrust centerContent libraryGuidesNewsletterPartner programTeamTerms of usePrivacy policy Contact us +358 10 231 6010 [email protected] App works in: Known in Finland as Digiturvamalli © Cyberday Inc. Kalevantie 2 33100 Tampere, Finland Cyberday.ai - Improve and certify your cyber security Tietosuojamalli 2.0 on julkaistu! Lue lisää blogista >>