GDPR subprocessors
Bright utilizes the following sub-processors in its delivery of its services
GitHub
Code hosting platform for version control and collaboration.
Data handled: Source Code, Issues, CI tools
Location for processing: Global, US.
Sentry
Software provider (SaaS) providing logging for errors occurring in our application for troubleshooting & quality improvements.
Data handled: IP-address, basic user agent details
Location of processing: US. Processing is covered by DPA including Model/Standard Contractual Clauses (SCC)
Amazon Web Services Europe
Provisioning and operations of server and infrastructure services (PaaS)
Data handled: All data handled in the service, including end-user data.
Location of processing: EU/EEA (Frankfurt data centers). Processing is covered
by DPA including Model/Standard Contractual Clauses (SCC).
Heroku
Platform as a service (PaaS) that enables developers to build, run, and operate applications entirely in the cloud.
Data handled: Database, Data traffic and end-user data.
Location for processing: Ireland AWS (eu-west-1)
CityNetwork / Cleura
Swedish provider of IT infrastructure services.
Data handled: Database, Data traffic and end-user data.
Location for processing: Sweden
MongoDB
Unified data platform for modern applications and includes a global cloud database, search, data lake, mobile, and application services.
Data handled: Database, Data traffic and end-user data.
Location for processing: Ireland AWS (eu-west-1)
Expo
Open-source platform for making universal native apps.
Data handled: Source Code
Location for processing: US
Google Analytics
https://analytics.google.com/analytics/
Traffic analytics and Maps.
Data handled: Ip-adress & app activity, including end-user data.
Location of processing: Worldwide (distributed in EU/EEA and USA)
Amplitude
Traffic analytics.
Data handled: Ip-adress & app activity, including end-user data.
Location for processing: A part of Amazon Web Services, EU/EEA (Frankfurt data centers). Processing is covered by DPA including Model/Standard Contractual Clauses (SCC).
Planhat
CSM-tool
Data handled: Company information, user data and account activity data.
Location for processing: Belgium and the Netherlands
Logz.io
A cloud observability platform for application logs.
Data handled: All data handled in the service, including end-user data for up to 5 days.
Location for processing: Ireland AWS (eu-west-1)
Mailgun
Marketing & email-tool.
Data handled: Email and email activity to our end-users.
Location for processing: US / EU
Mailchimp
Marketing & email-tool to our b2b customers.
Data handled: Names, emails and email activity.
Location for processing: US