List of sub-processors

Sub-processors FAQs

Here are some answers to common questions you may have about our use of sub-processors and our process for notifying you of any changes.

What is a sub-processor?

A sub-processor is a third-party vendor engaged by Ardoq to process customer data on our behalf. We use sub-processors to help us provide and support the Ardoq platform and services. Each sub-processor is bound by a contract that includes strict data protection obligations, and Ardoq remains fully responsible for their compliance.

How does Ardoq select its sub-processors?

We have a rigorous due diligence process for vetting potential sub-processors. Before engaging any sub-processor, we assess their security, privacy, and confidentiality practices to ensure they meet our high standards and legal obligations. This process is designed to ensure that your data is always handled securely and in accordance with data protection laws.

Why did I receive a notification about an update to the sub-processor list?

Under data protection regulations like GDPR, we are required to inform our customers in writing about any new sub-processors we intend to engage to process personal data included in the data that our customer upload on our platform. We believe in being transparent with all our customers about how their data is handled, which is why we send these notifications to our entire customer base.

Where can I find a list of Ardoq’s current sub-processors?

For a complete and up-to-date list of our sub-processors and the services they provide, please visit our sub-processor webpage, available at https://www.ardoq.com/sub-processors. This page also provides information on the location where data is processed by each sub-processor. You can always subscribe to receive updates on any changes to the sub-processor list of Ardoq on the same page.

What is my right to object to a new sub-processor?

As our customer, you have the right to object to the appointment of a new sub-processor within 60 days from the date of notification. Please note that any objections must be based on reasonable grounds relating to data protection.

What happens if I object?

As our customer, you have the right to object to the appointment of a new sub-processor within 60 days from the date of notification. Please note that any objections must be based on reasonable grounds relating to data protection.

If you object to a new sub-processor, please notify us in writing at privacy@ardoq.com within 60 days from the notification date. We will then work with you in good faith to discuss your concerns and explore a commercially reasonable resolution.

Will this update change the service I receive from Ardoq?

No. This update has no impact on the functionality or delivery of Ardoq’s services. You will continue to receive the same level of service as outlined in your agreement with us.

We have previously restricted artificial intelligence (AI) usage at the contract level. Will this update have any impact on the agreement?

No. This update does not override or modify the contractual restrictions related to the use of artificial intelligence (AI). Your existing agreement with Ardoq, including any provisions limiting or prohibiting AI use, remains in effect. Although certain sub-processors support our AI capabilities, these features will only be enabled where your current contractual framework doesn't restrict their use.

Do I need to take any action?

No action is required unless you have a specific objection to the new sub-processor based on data protection grounds. Otherwise, the notification is for your information only.

How does Ardoq ensure that sub-processors protect my data?

We have legally binding contracts, known as Data Processing Agreements (DPAs), in place with all our sub-processors. These agreements mirror the data protection commitments we have made to you in our DPA and require sub-processors to adhere to the same high standards for data security and confidentiality. Ardoq remains fully liable for the performance of our sub-processors.

What about international data transfers?

When Ardoq engages a sub-processor that transfers data outside of the European Economic Area (EEA), we ensure that a valid legal mechanism is in place to protect the data. This may include relying on an Adequacy Decision from the European Commission, implementing Standard Contractual Clauses (SCCs), or working with sub-processors that are certified under the Data Privacy Framework (DPF).

Will this change where my data is stored?

No, this update does not impact the location of your primary data center. Ardoq remains committed to hosting your data in the region you have specified, in accordance with our contractual obligations.

When will this appointment take effect?

The new sub-processors will be formally appointed at the expiration of the 60 days period from the date of the notification you received, allowing time for customer review and objection.

What if I have more questions?

We're here to help. If you have any further questions, please do not hesitate to contact us at privacy@ardoq.com. Please reference "Sub-processor Update" in your communication so we can direct your query to the correct team promptly.

You can subscribe here to receive notifications about changes to our list of sub-processors