List of sub-processors [Extended] 20230516
Version before 25 January 2023 available here
Version before 16 May 2023 available here
Appendix 2 – List of approved sub-processors
Last updated 16 May 2023
1. Name: Synthesia Inc.
Address: 874 Walker Road, Suite C, City of Dover, DE 19904, United States
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer
2. Name: Synthesia B.V.
Address: Grote Bickersstraat 74, 1013 KS Amsterdam, Netherlands
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer
3. Name: Synthesia GmbH
Address: Pacellistraße 8, 80333 München, Germany
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer
4. Name: Synthesia ApS
Address: Vesterbrogade 149, bygning 4, 1.tv, 1620 København V. Denmark
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer
5. Name: Amazon Web Services EMEA SARL
Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg
Contact person’s name, position and contact details: Laura Wainwright, AWS account manager lauwai@amazon.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Web hosting, data storage and compute for video processing services. Identity data is transmitted and stored for the purpose of user account setup and authorisation. Audio/Video data of a person is stored and transmitted for the purpose of video creation.
6. Name: MongoDB Limited
Address: Building Two, Number One Ballsbridge, Dublin 4, Ballsbridge, Dublin, Ireland
Contact person’s name, position and contact details: MongoDB’s DPO at privacy@mongodb.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Structuring and storing production data
7. Name: Google Cloud EMEA Limited
Address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
Contact person’s name, position and contact details: Emil Ochotta, Data Protection Officer, https://support.google.com/cloud/contact/dpo
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): email service provider used for communicating data to Processor
8. Name: Stripe Payments Europe, Ltd
Address: One Spencer Dock, North Wall Quay, Dublin 1
Contact person’s name, position and contact details: Adi Gilad, Data Protection Officer, dpo@stripe.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Payment provider only if the payment is made via credit card
9. Name: The Rocket Science Group LLC d/b/a Mailchimp
Address: 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA
Contact person’s name, position and contact details: Meghan Farmer, Data Protection Officer, dpo@mailchimp.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Automated user notifications. Identity data is transmitted for the purpose of providing email notifications to end users.
10. Name: Kaleido AI GmbH
Address: Ungargasse 37/BT1/3.3, 1030 Wien, Austria
Contact person’s name, position and contact details: Michal Dzujka, Customer Success Manager, michal@kaleido.ai
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Video processing to prepare a custom avatar. Video data of a person is transmitted and stored for a time-limited period for the purpose of pre-processing video to create a custom avatar for the service.
11. Name: Salesforce UK Limited
Address: Floor 26 Salesforce Tower, 110 Bishopsgate, London EC2N 4AY, United Kingdom
Contact person’s name, position and contact details: Lindsey Finch, DPO, privacy@salesforce.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Customer relationship management. Account emails are stored with the company information.
12. Name: Intercom R&D Unlimited Company
Address: 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland
Contact person’s name, position and contact details: Intercom Privacy Team, legal@intercom.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Support ticketing system and widget
13. Name: Surfboard Technology Ltd
Address: 320 City Road, London, EC1V 2NZ, United Kingdom
Contact person’s name, position and contact details: Elva Tucker, Customer Success Manager, elva@teamsurfboard.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Processing the support tickets raised via Intercom for allocation, scheduling, and prioritization with the support personnel.
14. Name: Slack Technologies, Inc.
Address: 4th Floor, One Park Place, Hatch Street Upper, Dublin 2, Ireland
Contact person’s name, position and contact details: Lindsey Finch, Executive Vice President, Global Privacy & Product Legal, dpo@slack.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Internal company communication and content moderation management for the service. Identity data is transmitted and stored for the purpose of content review on the service.
15. Name: IBM United Kingdom Limited
Address: PO Box 41 North Harbour, Portsmouth, PO6 3AU, United Kingdom
Contact person’s name, position and contact details: chiefprivacyoffice@ca.ibm.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion
16. Name: Deep Zen Ltd.
Address: Flat 1, 66 Upper, Richmond Road, London SW15 2RP, United Kingdom
Contact person’s name, position and contact details: Taylan Kamis CEO, taylank@deepzen.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion
17. Name: WellSaid Labs Inc.
Address: 2157 N Northlake Way, Ste 110, Seattle, WA, 98103-9184, United States
Contact person’s name, position and contact details: Marta Mueller, Customer Success Manager, marta@wellsaidlabs.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion
18. Name: Microsoft Ireland Operations Limited
Address: South County Business Park Leopardstown, Dublin 18, D18 P521, Ireland
Contact person’s name, position and contact details: Contact web form available here https://www.microsoft.com/en-us/concern/privacy or via phisical address
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Content moderation, text-to-speech, speech-to-text conversion
19. Name: Mux Inc.
Address: 1182 Market St. Suite 425 San Francisco, CA 94102, United States
Contact person’s name, position and contact details: Mrs. Becca Axvig – becca@mux.com, Head of People
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Video content delivery network
20. Name: Functional Software, Inc. d/b/a Sentry
Address: 45 Fremont Street, 8th Floor, San Francisco, CA 94105, United States
Contact person’s name, position and contact details: Virginia Badenhope, General Counsel, legal@sentry.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Error logging, the error log may contain a part of the user provided script that caused the error.
21. Name: UAB ConvertAPI
Address: Lauksargio g. 111, Vilnius LT-10105, Lithuania
Contact person’s name, position and contact details: data-protection@convertapi.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Conversion of PowerPoint presentations uploaded by the customers into slides in STUDIO. No persistent storage is utilised.
22. Name: Deepgram, Inc.
Address: 548 Market St, Suite 25104, San Francisco, CA 94104-5401, United States
Contact person’s name, position and contact details: Chris Dyer, VP of Sales, security@deepgram.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Validating that the speaker reading the consent script for the cloned voice services is the same speaker reading the script that will be used to clone their voice. Speech-to-text conversion.
23. Name: OpenAI OpCo, LLC
Address: 3180 18th St., San Francisco, CA 94110, United States
Contact person’s name, position and contact details: Jason Kwon, General Counsel, legal@openai.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Provides responses to the user’s queries when prompted to create a video script using AI from within the product. Content moderation. Sub-processor will not use the data for any internal purpose including training of the LLM models (https://openai.com/policies/api-data-usage-policies)