Bright utilizes the following sub-processors in its delivery of its services
Code hosting platform for version control and collaboration
Data handled: Source Code, Issues, CI tools
Location for processing: Global, US.
Software provider (SaaS) providing logging for errors occurring in our application for troubleshooting & quality improvements.
Data handled: IP-address, basic user agent details
Location of processing: US. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC)
Provisioning and operations of server and infrastructure services (PaaS)
Data handled: All data handled in the service, including end-user data.
Location of processing: EU/EEA (Frankfurt data centers). Processing is covered
by DPA including Model/Standard Contractual Clauses (SCC).
Platform as a service (PaaS) that enables developers to build, run, and operate applications entirely in the cloud.
Data handled: Database, Data traffic and end-user data.
Location for processing: Ireland AWS (eu-west-1)
Swedish provider of IT infrastructure services.
Data handled: Database, Data traffic and end-user data.
Location for processing: Sweden
Unified data platform for modern applications and includes a global cloud database, search, data lake, mobile, and application services.
Data handled: Database, Data traffic and end-user data.
Location for processing: Ireland AWS (eu-west-1)
Open-source platform for making universal native apps.
Data handled: Source Code
Location for processing: US
https://analytics.google.com/analytics/
Traffic analytics and Maps.
Data handled: Ip-adress & app activity, including end-user data.
Location of processing: Worldwide (distributed in EU/EEA and USA)
Traffic analytics.
Data handled: Ip-adress & app activity, including end-user data.
Location for processing: A part of Amazon Web Services, EU/EEA (Frankfurt data centers). Processing is covered by DPA including Model/Standard Contractual Clauses (SCC).
CSM-tool
Data handled: Company information, user data and account activity data.
Location for processing: Belgium and the Netherlands
A cloud observability platform for application logs.
Data handled: All data handled in the service, including end-user data for up to 5 days.
Location for processing: Ireland AWS (eu-west-1)
Marketing & email-tool.
Data handled: Email and email activity to our end-users.
Location for processing: US / EU
Marketing & email-tool to our b2b customers.
Data handled: Names, emails and email activity.
Location for processing: US