# Sub-processors List

The following is a list of sub-processors used by Greenlight to carry out data-processing activities that involve customer data. These sub-processors are identified below with their locations and the nature of services they provide to Greenlight. Before we engage with sub-processors, Greenlight performs due diligence on sub-processor privacy, security, and confidentiality practices and executes appropriate contractual measures regarding protection of personal data. Further information relating to each sub-processor’s individual data processing agreements and sub-processors can be found via the external links below.

| Name                  | Location | Nature & Purpose of Processing                                            | Link to Sub-processor Resources                                                                                  |
|-----------------------|----------|-------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------|
| Amazon Web Services    | U.S.A.   | Virtual server, network and data storage infrastructure with security, scaling, monitoring, and backup services | [New Global AWS Data Processing Addendum \| AWS Security Blog](https://aws.amazon.com/blogs/security/new-global-aws-data-processing-addendum/) |
| Google                 | U.S.A.   | Static web hosting, analytics, and cloud storage for encrypted tertiary backups; Customer Support                | [Cloud Data Processing Addendum (Customers)](https://cloud.google.com/terms/data-processing-addendum)              |
| Dropbox Sign           | U.S.A.   | Electronic Document (PDF) signing                                      | [September 24, 2021 This Data Processing Agreement (the “DPA”)](https://assets.dropbox.com/documents/en/legal/hs-data-processing-agreement.pdf) |
| [Sign Sub-processor List](https://subprocessor.dropbox-legal.com/sign-subprocessorlist.html) |          |                                                                         |                                                                                                                  |
| Twilio                 | U.S.A.   | Mobile Messaging                                                       | [Data Protection Addendum](https://www.twilio.com/en-us/legal/data-protection-addendum)                           |
| [Twilio Sub-Processors](https://www.twilio.com/en-us/legal/sub-processors) |        |                                                                         |                                                                                                                  |
| Datadog               | U.S.A.   | System and Security Log storage and monitoring                         | [Data Processing Addendum \| Datadog](https://www.datadoghq.com/legal/data-processing-addendum/)               |
| [Datadog Subprocessors](https://www.datadoghq.com/subprocessors/) |          |                                                                         |                                                                                                                  |
| Zendesk               | U.S.A.   | Customer Support                                                       | [Sub-processor Policy – Zendesk help](https://support.zendesk.com/hc/en-us/articles/4408883061530-Sub-processor-Policy) |
| Slack                 | U.S.A   | Notification of help desk tickets                                       | [Slack Subprocessors \| Legal](https://slack.com/slack-subprocessors)                                             |
| [Data Processing Addenda \| Legal \| Slack](https://slack.com/terms-of-service/data-processing) |        |                                                                         |                                                                                                                  |

## Optional Integration Partners

The following are optional “bring your own integration” partners which are available to customers of Greenlight. These integrations utilize a customer’s owned accounts and operate within the customer’s use of our Pattern Platform product in certain specific regions/locations. Greenlight facilitates these integrations through features of our Pattern Platform and stores transactional data associated with customer use of the integration partner. The customer maintains their controller-processor relationship with these integrations.

| Name                  | Location | Nature & Purpose of Processing                     | Link to Integration Partner Resources                                                         |
|-----------------------|----------|-------------------------------------------------|-----------------------------------------------------------------------------------------------|
| Zoom                  | U.S.A.   | Televideo                                       | [Zoom Video Communications, Inc. Global Data Processing Addendum](https://zoom.us/docs/doc/Zoom_GLOBAL_DPA.pdf)  |
| [Zoom Third-Party Subprocessors & Zoom Affiliates](https://explore.zoom.us/en/subprocessors/) |         |                                                 |                                                                                               |
| PayPal                | U.S.A.   | Reward processing                               | [PayPal Data Protection Addendum for Card Processing Products](https://www.paypal.com/us/legalhub/data-protection)  |