19. List of Sub-Processors

To ensure transparency and compliance with data protection regulations, we maintain a list of sub-processors that support Thru in delivering our services. Sub-processors are third-party entities that process personal data on behalf of Thru, providing specialized tools or services essential to our operations. Below is the current list of sub-processors, including their processing purposes and contact information.

Before engaging with any sub-processor, we perform a thorough risk assessment to evaluate their security practices, data protection measures, and compliance with applicable regulations. We continually monitor their performance to ensure they align with our organizational policies and maintain the highest standards of data privacy and security.

Below is the current list of sub-processors, including their processing purposes and contact information.

1. Atlassian

Entity: Atlassian Corporation Plc
Address: 350 North Saint Paul Street, Suite 2900, Dallas, TX 75201, United States
Contact: General Inquiries
Description of Processing:

Project Management: Project management and release management.
Customer Support: Customer ticket management and incident management.
Change Management: Change control management.
Quality Assurance and Development: QA testing and development.

2. Amazon Web Services (AWS)

Entity: Amazon Web Services, Inc.
Address: 410 Terry Avenue North, Seattle, WA 98109, United States
Contact: Privacy Policy
Description of Processing:

AWS SES communication service is used for automated email notifications sent by the Thru system.
Legacy source version control system is stored in AWS.

3. Azure

Entity: Microsoft Corporation
Address: One Microsoft Way, Redmond, WA 98052-6399, United States
Contact: Trusted Cloud Privacy
Description of Processing:

Cloud infrastructure and security.

4. HubSpot

Entity: HubSpot, Inc.
Address: 25 First Street, Cambridge, MA 02141, United States
Contact: Privacy Policy
Description of Processing:

CRM (Customer Relationship Management).

5. Intuit (QuickBooks)

Entity: Intuit, Inc.
Address: 2700 Coast Avenue, Mountain View, CA 94043, United States
Contact: Privacy Policy
Description of Processing:

Accounting software.

6. BPO American Corp.

Entity: BPO American Corp.
Address: 400 W. Cummings Park, Suite 1725, Woburn, MA 01801, United States
Contact: Privacy Policy
Description of Processing:

Live chat support for customer inquiries and support issues.
Data collection and entry into the Thru Customer Success Jira Service Management platform for issue tracking and resolution.
Customer data is handled exclusively through controlled systems, ensuring security and compliance with organizational policies and regulatory requirements.

7. Twilio Inc.

Entity: Twilio Inc.
Address: 375 Beale Street, Suite 300, San Francisco, CA 94105, United States
Contact: Privacy Policy
Description of Processing:

Multi-factor authentication via SMS and email (SendGrid).

8. MongoDB, Inc.

Entity: MongoDB, Inc.
Address: 1633 Broadway, 38th Floor, New York, NY 10019, United States
Contact: Privacy Policy
Description of Processing:

Cloud services and database management.

9. Calendly, LLC

Entity: Calendly, LLC
Address: 1200 Ashwood Parkway, Suite 160, Atlanta, GA 30338, United States
Contact: Privacy Notice
Description of Processing:

Scheduling application hosted on Kubernetes and Google Cloud Services (GCS).
GCS data center operations are accredited for high standards of security and compliance.