Culture Amp
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 89 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Culture Amp's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/culture-amp"><img src="https://thirdpartyindex.com/badge/culture-amp.svg" alt="Culture Amp transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/culture-amp)Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page | snapshot |
Subprocessors
30 third parties, 1 affiliate. CSV · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services Inc. | Amazon Web Services is an Infrastructure-as-a-Service provider, used to host the Culture Amp platform. | USA, Ireland, or Australia | |
| Anthropic | Anthropic is a AI provider that develops and operates large language model AI systems, including the Claude family of AI assistants. Anthropic provides AI inference services via its API, processing text inputs through its language models to generate responses. | USA | |
| Atlassian Pty Ltd | Atlassian provides project management and collaboration tools used by Culture Amp including Confluence, Jira and Trello. | USA | |
| Bugsnag Inc. | All PII fields collected by Culture Amp may be captured and processed by Bugsnag for the use of Culture Amp engineers to diagnose and fix errors.; Bugsnag is a stability monitoring solution which captures unhandled exceptions, diagnostic data, and version information in browser, mobile and server-side applications via open source SDKs for 50+ software platforms. | USA, EEA | |
| ClickHouse, Inc. | ClickHouse is an analytical database provider used to power product reporting and insights features. It stores survey responses, performance data, and employee data records to enable real-time analytics queries. | EEA, APAC and USA | |
| Culture Lake | USA | ||
| Datadog Inc. | All PII fields collected by Culture Amp may be captured and processed by DataDog for the use of Culture Amp engineers to diagnose and fix errors.; Datadog is a monitoring and analytics tool for information technology (IT) and DevOps teams that can be used to determine performance metrics as well as event monitoring for infrastructure and cloud services. The software can monitor services such as servers, databases and tools. | USA | |
| dbt Labs, Inc. (Fishtown Analytics Inc.) | dbt Labs enables our data analysts and engineers to prepare and transform data in our warehouse for analysis in business intelligence tools. | USA | |
| DealHub, Inc. | DealHub CPQ is a configure, price, quote platform that streamlines the B2B sales cycle by generating accurate quotes, automating approval workflows, and managing contract terms. Through its seamless integration with Salesforce, it synchronizes live customer and product data, ensuring sales pipelines and financial records remain aligned in real time. Ultimately, this software acts as a subprocessor by capturing and processing customer order data, contract details, and pricing structures during the deal-closing process. | USA | |
| Docusign, Inc. | Document storage of customer contracts (e.g. General Terms, DPA+SCCs). | USA | |
| ElevenLabs, Inc. | ElevenLabs provides transcription and speach generation services. We use this service to provide dictation and voice capability to features like AI Coach. We use Zero Rentention Mode, so all voice data is processed emphemorally (no storage or training is allowed). The dictaion and voice capability is not core to the platform. Users can choose not to use the services. | USA | |
| Fivetran Inc. | Fivetran is an ETL (extract, transform, load) tool used to replicate certain data from SaaS tools into a data warehouse for additional analysis. | USA | |
| Functional Software Inc. | All PII fields collected by Culture Amp may be captured and processed by DataDog for the use of Culture Amp engineers to diagnose and fix errors.; Sentry is an error monitoring tool. They also provide performance monitoring software. Their platform helps every developer diagnose, fix, and optimize the performance of their code. | USA, EEA | |
| FustionAuth, Inc. | FusionAuth is a Customer Identity and Access Management platform, which we use for standards-based authentication, identity providers, and API token management. It has basic data about employees including their identity information and employment information. | EEA, APAC and USA | |
| Glean Technologies Inc. | Glean is an AI-powered SaaS tool that integrates with various data sources and uses machine learning to analyze, interpret, and surface information to end users. Tailored specifically for Culture Amp, it ingests information from numerous corporate data repositories, making them searchable and providing accurate and relevant answers to questions about corporate data and the internet via a familiar ChatGPT-style interface. | USA | |
| Gong Inc. | Gong is an AI bot that joins customer facing Zoom conversations. It is able to transcribe and annotate conversations to help customer facing teams review calls, assist sales coaching and provide intelligence to businesses based on customer facing conversations. | USA | |
| Google Inc. | Google is Culture Amp's email and translation services provider. If a customer emails a Culture Amp domain email address, the content of the messages will go to Google. Culture Amp also leverages Google data analytics and services as a translation provider.; In addition, Google Drive and Sheets are used by analytics and data science teams to produce benchmarks, conduct research for product improvement, and perform ad-hoc analysis on customer data. Personal information fields collected by Culture Amp may be stored in Google Drive or Sheets to assist in this analysis and research. | USA, Chile, Taiwan, Singapore, Ireland, Netherlands, Finland, Belgium | |
| Intercom Inc. | Intercom has access to high level account information (i.e. account name and number of users) as well as high level information about administrators authenticated to the platform (i.e. name, email, last login time and last report reviewed). Intercom is used for in-app messaging and analytics within the Culture Amp platform. Culture Amp sends messages to administrators about product improvements and service status from time to time. | USA | |
| Merge API, Inc. | Merge provides integrations to multiple HRIS providers. It enables Culture Amp customers to integrate with their chosen HRIS provider where Culture Amp does not have a native integration. Customer’s employee data is pulled in using a common format from Customer HRIS tools to the Culture Amp platform via Merge. | USA | |
| MongoDB Inc. | MongoDB is a database technology provider. It collects most PII fields collected by Culture Amp in relation regard to our Engagement product. Demographics, surveys, responses and comments are all stored in the databases managed by MongoDB. | USA | |
| Netskope, Inc. | Netskope is a data loss prevention and web security tooling integrated with Culture Amp platforms and devices to prevent data leakage. | USA | |
| Pendo.io, Inc. | Pendo processes customer feedback and user research data, including survey responses, interview notes, support interactions, feature requests, and other product feedback submitted by authorized users. The service uses artificial intelligence and machine learning technologies to analyze unstructured text, identify themes and trends, generate summaries, categorize feedback, and provide insights to support product discovery and decision-making.; Processing activities may include the collection, storage, organization, aggregation, analysis, summarization, classification, and retrieval of feedback data. AI models may be used to generate insights, recommendations, topic clustering, sentiment analysis, and natural language summaries based on the information provided by users. | USA | |
| Proofpoint Inc. | ProofPoint is an email security platform which scans all emails sent or received by a Culture Amp email address. The content of these messages and any attachments are scanned for malicious links, malicious code, or suspicious text and a copy of an email may be retained in the ProofPoint platform if it is suspected to be malicious. | USA | |
| Salesforce, Inc. | Customer Relationship Management (CRM) platform that records and stores commercial information and interactions with our customers throughout the customer lifecycle. | USA | |
| Skilljar Inc. | Skilljar uses SSO login for some customers to validate what course content they can access on our customer training site. Skilljar stores name, email, company, and role type (admin, manager, other). | USA | |
| Splunk, Inc. | All PII fields collected by Culture Amp may be captured and processed by Splunk for the purposes of security monitoring, threat detection, investigation, incident response, and maintaining the security of Culture Amp systems.; Splunk is a security information and event management (SIEM) and analytics platform used to collect, index, search, monitor, and analyse security and operational event data. Splunk Enterprise Security provides additional security monitoring, correlation, alerting, and investigation capabilities to support threat detection, incident response, and security operations. | Ireland | |
| Temporal Technologies, Inc. | Temporal provides background task processing for jobs that run on a schedule or other triggers (e.g. send email when the survey opens to all participants). | USA | |
| Twilio Inc. | Twilio is a cloud-based communications platform that enables Culture Amp to deliver automated messages and notifications via SMS and email. The platform facilitates secure and reliable communication between our team and customers. | USA | |
| Vitally Inc. | Vitally stores all core customer data in one place - email communication, platform usage, and commercial data. Vitally can read all emails for users with Gmail connected, including sensitive PII. | USA | |
| Zendesk Inc. | Zendesk is a Customer Service Quality Assurance Tool that Culture Amp Support leverages to review chats and emails that customers initiate with our team. Contents of the messages are retained in the Klaus platform, however all names and email addresses are masked. | EEA |
Changes
None since tracking began.