Subprocessors

発効日：2026年10月14日

Unifyr, Inc., Unifyr Ltd., Unifyr Pte Ltd, Unifyr Co Ltd and Unifyr Europe GmbH (collectively, “Unifyr”) rely on certain subprocessors to provide our services. This page sets out who those subprocessors are, how we select and manage them, and how we handle international data transfers.

What is a Subprocessor?

'Customer data' is personal data processed by Unifyr (acting as a processor) on behalf of the customer (acting as a controller) to provide our products and/or services.

A 'subprocessor' is a third-party (such as a contractor, service provider, or vendor) further engaged by Unifyr to help us process customer data for the same purpose. We engage different types of subprocessors to perform various functions as explained in the table below.

Where We Act as an Independent Controller

Where Unifyr acts as an independent controller, we process personal data on our own behalf and for our own business purposes ("Unifyr Data") in compliance with applicable data protection law. For example, when we process user personal data in connection with feedback or feature requests, or when a user consents to our use of analytics cookies.

Third-parties engaged to process Unifyr data are not subprocessors, but we follow the same review process outlined below before engaging these service providers.

For more information about our data and privacy protective practices, please refer to our Privacy Policy.

Our Vendor Review Process

Due diligence

We undertake to use a commercially reasonable selection process to evaluate the security, privacy and confidentiality practices of proposed subprocessors before they process customer data.

Contractual safeguards

We require subprocessors to satisfy obligations equivalent to those contained in our own customer agreements, including provisions to:

• Process customer data in accordance with documented instructions
• Provide regular security and data protection training to personnel who have access to customer data
• Implement and maintain appropriate technical and organisational measures
• Provide evidence of compliance with its security and data protection obligations (either in the form of annual certification or audits)
• Promptly inform us of any actual or potential security incidents and/or personal data breaches
• Cooperate with us in order to deal with requests from customers, data subjects or data protection authorities

International Data Transfers

Third-countries with an adequate level of data protection

We may freely transfer personal data to subprocessors and third-countries recognised under applicable data protection law as providing an adequate level of data protection (including U.S. Data Privacy Framework (DPF) registered participants).

Restricted transfers

Where information is transferred to a subprocessor or third country not recognised as providing an adequate or equivalent level of data protection ('restricted transfer'), we ensure adequate transfer mechanisms and appropriate safeguards are in place to protect personal data (such as standard contractual clauses and ISO aligned technical and organisational measures).

Product Subprocessors

These subprocessors provide infrastructure, communications, and backend services that power the Unifyr platform.

USA Processing

The following sub-processors process data in USA regions:

EU Processing

The following sub-processors process data in EU regions:

* Google Analytics is listed here for transparency. When configured with IP anonymization and without user identifiers, it does not process personal data in a way that identifies individuals. However, as privacy scanning tools may detect Google Analytics calls on our platform, we include it here so customers are fully informed.

Internal Operations Subprocessors

These sub-processors support Unifyr's internal operations, including customer success, support, collaboration, and service delivery, as well as partner accounts for support ticket management under the Optional Service: Extended Partner Support.