Snapshot 231789
Parsed
What we read from this document, as JSON. Each entry names the snapshot it was read from.
{
"entries": [
{
"kind": "subprocessor",
"vendor": "allego",
"evidence_id": 231789,
"data": {
"name": "Allego",
"purposes": [
"PCI Pal uses Allego as a sub-processor to support sales enablement activities, including training content delivery and sales call/presentation review. Allego operates under its own compliance certifications and maintains documentation governing the processing of any personal data involved. Further detail on Allego's compliance posture is available via the Allego Trust Centre."
],
"locations": [
"US"
]
}
},
{
"kind": "subprocessor",
"vendor": "amplemarket",
"evidence_id": 231789,
"data": {
"name": "Amplemarket",
"purposes": [
"PCI Pal uses Amplemarket as a sub-processor to support sales prospecting and outreach activities, including identifying, enriching, and engaging prospective customer contacts. Amplemarket operates under its own compliance certifications and maintains documentation governing the processing of any personal data involved. Further detail on Amplemarket's compliance posture is available via the Amplemarket Trust Centre."
],
"locations": [
"US"
]
}
},
{
"kind": "subprocessor",
"vendor": "datadog",
"evidence_id": 231789,
"data": {
"name": "Datadog",
"purposes": [
"Real-time cloud monitoring and observability platform that tracks metrics, logs, and traces across applications, servers, and infrastructure."
],
"locations": [
"US, EU"
]
}
},
{
"kind": "subprocessor",
"vendor": "docusign",
"evidence_id": 231789,
"data": {
"name": "DocuSign",
"purposes": [
"PCI Pal uses DocuSign as a sub-processor to facilitate secure electronic signature and document execution processes. This supports the handling of contracts, agreements, and related documentation as part of PCI Pal's business operations. DocuSign operates under its own extensive compliance certifications (including ISO 27001 and SOC 2) and maintains a Data Processing Agreement (DPA) governing the processing of any personal data involved. Further detail on DocuSign's compliance posture is available via the DocuSign Trust Centre."
],
"locations": [
"US, EU"
]
}
},
{
"kind": "subprocessor",
"vendor": "elasticsearch",
"evidence_id": 231789,
"data": {
"name": "Elastic",
"purposes": [
"PCI Pal uses Elastic as a sub-processor to support logging, search, and monitoring functions within its technical infrastructure. Elastic operates under its own compliance certifications and provides a Data Processing Agreement (DPA) governing the processing of any personal data involved. Further detail on Elastic's compliance posture is available via Elastic's Trust and security documentation."
],
"locations": [
"EU, US, UK"
]
}
},
{
"kind": "subprocessor",
"vendor": "ironclad",
"evidence_id": 231789,
"data": {
"name": "Ironclad",
"purposes": [
"PCI Pal uses Ironclad as a sub-processor to support contract lifecycle management, including the drafting, review, approval, and archiving of contracts and related agreements. Ironclad operates under its own compliance certifications and maintains documentation governing the processing of any personal data involved. Further detail on Ironclad's compliance posture is available via the Ironclad Trust Centre."
],
"locations": [
"US"
]
}
},
{
"kind": "subprocessor",
"vendor": "linkedin",
"evidence_id": 231789,
"data": {
"name": "LinkedIn",
"purposes": [
"PCI Pal uses LinkedIn Sales Navigator as a sub-processor to support sales prospecting and business development activities, including identifying and researching prospective customer contacts. LinkedIn operates under its own compliance certifications and maintains a Data Processing Agreement (DPA) governing the processing of any personal data involved. Further detail on LinkedIn's compliance posture is available via the LinkedIn Trust Centre."
],
"locations": [
"US"
]
}
},
{
"kind": "subprocessor",
"vendor": "microsoft",
"evidence_id": 231789,
"data": {
"name": "Microsoft 365",
"purposes": [
"PCI Pal uses Microsoft 365 as a sub-processor to support core business operations, including email, collaboration, and document storage (via Teams and related services). Microsoft operates under its own extensive compliance certifications (including ISO 27001, SOC 2, and PCI DSS) and provides a documented Service Level Agreement (99.9% availability). Further detail on Microsoft's compliance posture is available via the Microsoft Service Trust Portal."
],
"locations": [
"Global"
]
}
},
{
"kind": "subprocessor",
"vendor": "drata",
"evidence_id": 231789,
"data": {
"name": "SafeBase",
"purposes": [
"PCI Pal uses SafeBase (Advanced package) as a sub-processor to operate its Trust Centre and to automate responses to customer and prospect security questionnaires. The platform maintains a trust content library of approved question-and-answer pairs and matches incoming questionnaire questions against this library to generate draft responses for human review. SafeBase is a vendor-hosted, cloud-based platform — PCI Pal does not provision or maintain any underlying infrastructure — and integrates with Salesforce to verify account and NDA/commercial status as part of the Trust Centre access process. Further detail on SafeBase's compliance posture is available via the SafeBase Trust Centre."
],
"locations": [
"US"
]
}
},
{
"kind": "subprocessor",
"vendor": "salesforce",
"evidence_id": 231789,
"data": {
"name": "Salesforce",
"purposes": [
"PCI Pal uses Salesforce as a sub-processor to support customer relationship management (CRM) activities, including the storage and management of customer and prospect data. Salesforce operates under its own extensive compliance certifications (including ISO 27001, SOC 2, and PCI DSS) and maintains a Data Processing Agreement (DPA) and Transfer Agreement governing the processing and international transfer of any personal data involved. Further detail on Salesforce's compliance posture is available via the Salesforce Trust site."
],
"locations": [
"Global"
]
}
}
]
}