1. What a subprocessor is
A subprocessor is a third party we engage that processes personal data on behalf of our customers in the course of delivering the service. This is distinct from a vendor that processes only our own business data, such as our accounting provider, which is not a subprocessor.
2. Categories we engage
Subprocessors fall into the following categories:
- Cloud infrastructure and hosting, providing the compute, storage and network on which the platform runs.
- Transactional email delivery, for account, security and service notices.
- Application error and performance monitoring, which may incidentally process identifiers contained in diagnostic data.
- Support tooling, where a customer conversation contains personal data.
The specific providers, their processing role and their processing location are set out in the current subprocessor list.
3. Obtaining the current list
We provide the subprocessor list on request rather than publishing it as a static page, so that the version you receive is current and dated. Request it from security@aegisone.lynxclub.ph or through our contact form.
Customers with an executed Data Processing Agreement may subscribe to change notifications and will receive advance notice of additions and replacements.
4. Selection and oversight
Before engaging a subprocessor we assess its security posture, its data protection commitments and its transfer arrangements. Each subprocessor is engaged under a written contract imposing obligations no less protective than those we owe our customers.
We review engaged subprocessors periodically and on any material change to their service or posture.
5. Objection
Customers may object to a new subprocessor on reasonable data protection grounds within the notice period stated in the Data Processing Agreement. We will work to address the concern; where we cannot, the customer may terminate the affected service without penalty for the unused portion of a prepaid term.