Data Subprocessors

Last updated March 11, 2019

To support delivery of our Services, Dovetail may engage and use data processors with access to certain Customer Data or Personal Information (each, a “Subprocessor”). This page provides information about each Subprocessor.

Please email security@dovetailapp.com if you have any questions.


Amazon Web Services

aws.amazon.com

  • Location: Seattle, United States.
  • Data security certifications: Privacy Shield, ISO27001, SOC3.
  • Data processed: Anonymized content, email address, IP address.
  • Use: Data storage, backups, CDN, DNS, SSL, domain management, transactional emails.
  • DPA signed: Yes – incorporated into terms.

Google Cloud

cloud.google.com

  • Location: Mountain View, United States.
  • Data security certifications: Privacy Shield, ISO27001, SOC3.
  • Data processed: User-added content (when using sentiment analysis).
  • Use: Natural language processing.
  • DPA signed: Yes – incorporated into terms.

Heroku

heroku.com

  • Location: San Francisco, United States.
  • Data security certifications: Privacy Shield, ISO27001, 27017, 27018 SOC2 Type 1.
  • Data processed: User name, email address, and IP address.
  • Use: Infrastructure hosting and encrypted data storage.
  • DPA signed: Yes – incorporated into terms.

Mixpanel

mixpanel.com

  • Location: San Francisco, United States.
  • Data security certifications: Privacy Shield.
  • Data processed: User name, email address, IP address, analytics.
  • Use: CRM, product analytics, marketing emails.
  • DPA signed: Yes – incorporated into terms.

Stripe

stripe.com

  • Location: San Francisco, United States.
  • Data security certifications PCI.
  • Data processed: Billing contact name, email, address, card details.
  • Use: Payments and subscription management.
  • DPA signed: Yes – 8 October 2018.

Made in Australia by 🐨Auzzies and 🥝Kiwis

© Dovetail Research Pty. Ltd.

ABN: 84 615 270 025