Updated March 11, 2019

Data Subprocessors

This is a list of the data subprocessors we use to support delivery of our Services.

To support delivery of our Services, Dovetail may engage and use data processors with access to certain Customer Data or Personal Information (each, a “Subprocessor”). This page provides information about each Subprocessor.

Please email security@dovetailapp.com if you have any questions.


Amazon Web Services

aws.amazon.com

  • Location: Seattle, United States.
  • Data security certifications: Privacy Shield, ISO27001, SOC3.
  • Data processed: Anonymized content, email address, IP address.
  • Use: Data storage, backups, CDN, DNS, SSL, domain management, transactional emails.
  • DPA signed: Yes – incorporated into terms.

Google Cloud

cloud.google.com

  • Location: Mountain View, United States.
  • Data security certifications: Privacy Shield, ISO27001, SOC3.
  • Data processed: User-added content (when using sentiment analysis).
  • Use: Natural language processing.
  • DPA signed: Yes – incorporated into terms.

Heroku

heroku.com

  • Location: San Francisco, United States.
  • Data security certifications: Privacy Shield, ISO27001, 27017, 27018 SOC2 Type 1.
  • Data processed: User name, email address, and IP address.
  • Use: Infrastructure hosting and encrypted data storage.
  • DPA signed: Yes – incorporated into terms.

Mixpanel

mixpanel.com

  • Location: San Francisco, United States.
  • Data security certifications: Privacy Shield.
  • Data processed: User name, email address, IP address, analytics.
  • Use: CRM, product analytics, marketing emails.
  • DPA signed: Yes – incorporated into terms.

Stripe

stripe.com

  • Location: San Francisco, United States.
  • Data security certifications PCI.
  • Data processed: Billing contact name, email, address, card details.
  • Use: Payments and subscription management.
  • DPA signed: Yes – 8 October 2018.

Made in Australia by 🐨Auzzies and 🥝Kiwis

© Dovetail Research Pty. Ltd.

ABN: 84 615 270 025