Last updated: 8 May 2025
Sub-processors used by the Humbol application
Secure storage and processing of data is of utmost importance to us. Humbol’s services are hosted on Amazon Web Services (AWS), which stores the data in compliance with the regulations within the European Union. AWS’ safety work complies with the industry standard and CISPE. You can find more information regarding our sub-processors via the links provided below.
| Sub-processor | Contract Entity’s Country | Services used | Nature and Purpose of Processing | Data residency | Safeguards for transfer of data | Reference |
Amazon Web Services EMEA SARL | Luxembourg | Primary cloud services provider: cloud computing and storage, content and email delivery | Personal data contained in user account information and texts created by customer in discussions, actions and goals. Email notifications from the service. | In EU | DPA, AWS SCC | https://docs.aws.amazon.com/whitepapers/latest/navigating-gdpr-compliance/welcome.html |
Microsoft Ireland Operations Ltd | Ireland | Microsoft Graph API, Entra ID and Office 365 | Login, fetching profile information and creating calendar events for MS users | Depends on customer’s MS account. | DPA | https://www.microsoft.com/en-us/trust-center/privacy/gdpr-overview |
| Google Cloud EMEA Limited | Ireland | Google Workspace and Google Cloud | Login, fetching profile information and creating calendar events for Google users | Depends on customer’s Google account. | DPA | https://cloud.google.com/privacy/gdpr |
| Sentry | USA (CA) | Application monitoring | Pseudonymized data of errors and application usage events with personal information scrubbed away | In EU | DPA | https://sentry.io/trust/privacy/ |
Sub-processors used in Humbol customer support and acquisition
| Sub-processor | Contract Entity’s Country | Services used | Nature and Purpose of Processing | Data residency | Safeguards for transfer of data | Reference |
Microsoft Ireland Operations Ltd | Ireland | Microsoft Office 365 | Humbol ‘s internal documents and communications of it’s employees | In EU | DPA | https://www.microsoft.com/en-us/trust-center/privacy/gdpr-overview |
| HubSpot Ireland Ltd | Ireland | CRM and Customer support | Customer support and acquisition | In EU | DPA | https://www.hubspot.com/data-privacy/gdpr |
| Oneflow AB | Sweden | Contract signing | Customer information included in contracts | In EU | DPA | https://oneflow.com/security/gdpr/ |
| Google Ireland Limited | Ireland | Google Analytics, Tag Manager | Depersonalized data of website usage | In USA | DPA | https://support.google.com/analytics/answer/6004245 |