List of Data Subprocessors
Your privacy is extremely important to us. Our priority is to store your data and your projects safely while continuing to deliver the best service possible; this is something we will never compromise on.
We would like to assure you that each and every subprocessor which obtains some of your personal data has been carefully reviewed. The subprocessors are also regularly monitored and fully compliant with all current standards and regulations. We use the subprocessors’ services only in situations when we cannot do something on our own.
| Sub-Processor’s Name | Why we use the Sub-Processor? |
| Promethean Limited
UK Company | For customers and users of Promethean services in the United States, Promethean Limited is a critical infrastructure subprocessor. Certain employees of Promethean Limited, a UK company and an affiliate under common management and control with Promethean Inc., may have access to the personally identifiable information of the U.S.-based users of Promethean’s products or services. Access to user data is limited to those employees with a need-to-know for purposes of providing customer support or product development and engineering support to, for example, engage in “bug-fixing” or other similar product or service development or support functions. |
| Promethean Inc.
US Company | For customers and users of Promethean services in The United Kingdom, the European Union and other countries outside of the United States, Promethean Inc. is a critical infrastructure subprocessor. Certain employees of Promethean Inc., a US company and an affiliate under common management and control with Promethean Limited, may have access to the personally identifiable information of the users of Promethean’s products or services. Access to user data is limited to those employees with a need-to-know for purposes of providing customer support or product development and engineering support to, for example, engage in “bug-fixing” or other similar product or service development or support functions. |
| Promethean Poland sp. z.o.o
Poland Company | Promethean Poland is a critical infrastructure subprocessor. Certain employees of Promethean Poland sp. z. o.o, a Polish entity and an affiliate under common management and control with Promethean Inc. and Promethean Limited, may have access to the personally identifiable information of the users of Promethean’s products or services. Access to user data is limited to those employees with a need-to-know for purposes of providing customer support or product development and engineering support to, for example, engage in “bug-fixing” or other similar product or service development or support functions. |
| Amazon Web Services, Inc.
US Company | Amazon Web Services, Inc. is a critical infrastructure subprocessor. Promethean stores all user profiles and projects in an AWS secured SOC2 certified data center located in the U.S. AWS provides hosting services only and does NOT have access to any user personal data. |
| Nightfall by Shoreline
US Company | Nightfall is a contingent subprocessor. Nightfall operates within Atlassian (e.g. Jira) environments and its classifiers proactively identify personal data and authentication information contained in user-generated artifacts (e.g. Jira tickets) within Atlassian products. When such personal data is detected, Nightfall automatically quarantines, redacts, or removes the identified data based on predefined governance controls. Use of this service helps to ensure personal data does not persist within Jira tickets, pages, attachments, or comment threads which reduces operational risk and strengthens compliance capabilities. |
| Google LLC
US Company | Google is a contingent subprocessor. Promethean uses Google Analytics and Firebase to analyze application usage. Promethean uses only IP address and other device-related information so access to any personal data is limited to data such as an IP address. |
| Zendesk, Inc.
US Company | Zendesk is a contingent subprocessor. Promethean uses Zendesk to help Explain Everything users that encounter any problems while using our Explain Everything app. For support purposes, user personal data may be transferred to Zendesk only if the user submits a support request. Only limited Promethean personnel (2 individuals located in Poland) currently have access to the Zendesk Tech Support features. |
| Salesforce, Inc.
US Company | Salesforce is a contingent subprocessor. Sales and marketing related data, including records of customer sales, potential customer sale interactions, customer marketing data, customer leads, warranty related records and customer service-related interactions with customers (including the business contact information of customer representatives) is maintained in Promethean’s Salesforce instance and the Pardot service provided by Salesforce. As an example of Promethean use of the Salesforce platform, in the event a user contacts Promethean support for help with Promethean products or services, user contact data will be collected and stored within the Promethean Salesforce instance. Only Promethean employees with a need for access have access to Promethean’s Salesforce instance. Promethean also uses Slack, a cloud-based team communication platform that is owned by Salesforce, for internal communication when engineering or development team members help to resolve support issues. In addition, Promethean uses Tableau, a business intelligence service owned by Salesforce, by feeding analytics data from Google and Mixpanel into Tableau for the purpose of building analytics reporting. |
| Microsoft
US Company | Microsoft is a contingent subprocessor. If a user contacts Promethean support for assistance, Promethean may utilize Microsoft Office 365 tools for internal communication while working to resolve the customer’s issue. In this limited context, personal data may be processed via a Microsoft application. |
| Atlassian
US Company. Originally founded in Australia. | Atlassian is a contingent subprocessor. Promethean uses Atlassian products for tracking engineering and development tasks. In limited cases such as, for example, the resolution of customer reported software defects, system log files or personally identifiable information (e.g. a user’s email address) will be stored in Promethean’s Atlassian instance. Only those Promethean personnel with a need for access have access to view the tickets within Promethean’s Atlassian instance. |
| User.com
Poland Company | User.com is a contingent subprocessor. Promethean uses the marketing automation tool/application provided by User.com for email marketing campaigns relating to the Explain Everything service. Personal data maintained in the User.com service includes user email addresses and, in some cases, user first and last names. The Promethean User.com instance is hosted and maintained on servers located in the EU. Only the limited Promethean employees that require access to the User.com data to perform their jobs have access to the data stored and maintained in Promethean’s User.com database. |
| PayPal Braintree
US Company | Braintree is a contingent subprocessor. Promethean does not process any user debit or credit card financial data. In the event a user elects to pay for any Promethean product or service using a debit or credit card, the user is transferred to the Braintree platform operated by Braintree. Promethean receives payment confirmation data from Braintree and only Promethean employees with a need to know such information have access to such data. |
| Functional Software, Inc. dba Sentry
US Company | Sentry is a contingent subprocessor. Promethean uses the Sentry service for error tracking, crash reporting, performance monitoring and diagnostics of Promethean services. Only the limited Promethean employees that require access to Sentry data to perform their jobs have access to any Sentry provided data. |
| Mixpanel
US Company | Mixpanel is a contingent subprocessor. Promethean uses MixPanel to analyze application usage. Promethean uses only IP address and other ActivPanel device-related information so access to any personal data is limited to such data. No other personally identifiable information is collected via MixPanel. |
| Augment Me, Inc.
US Company | Augment Me is a contingent subprocessor. Promethean uses Augment Me technology to provide AI-enhanced learning assessment functionality within Promethean’s services. In the event a user elects to access the learning assessment functionality within a Promethean service, the user videos a data subject and submits the video to the Promethean service for assessment. Promethean uses Augment Me technology to complete the assessment of the video and in this limited context, Augment Me may have temporary access to limited personal data. By contract, Augment Me promptly destroys any video provided by Promethean upon delivery of the assessment results to Promethean and no user personal data is to be retained by Augment Me or the Augment Me technology platform. |
| Partner Hero
US Company with services provided by its affiliates located in Honduras and the Philippines. | Partner Hero is a contingent subprocessor. Promethean contracts with Partner Hero for assistance with processing of Promethean warranty services including material replacement and service work orders, processing of (i) deliveries and collections of Promethean warranty products from customers and Promethean distributors; (ii) workshop completion job sheets; (iii) onsite completion job sheets; (iv) stock adjustments; (v) registration portal queries; (vi) the delivery of quotes to customers for “out of warranty” repairs; and (vii) aged warranty case reviews. In these and other warranty-related support activities, Partner Hero may process certain limited customer information such as registered installation address (e.g. school address), and customer contact information such as the name, email address or phone number of the customer contact or business partner contact for warranty-related questions or services.
Partner Hero is only permitted to use any personal data processed for the purpose of providing the requested customer support.
|
| Maciej Kupczak
Independent Contractor in Poland | Maciej Kupczak is a contingent subprocessor. Promethean has engaged this contractor to provide software architecture & engineering services for Explain Everything Whiteboard, iOS app, and Collaboration Server. This contractor has access to the Explain Everything Collaboration Server data and logs to support any customer identified bugs or issues. In this context, this Contractor may have access to limited customer personal data (e.g., a customer’s name or email address) that may be included in a customer support ticket that describes the customer’s issue. |
| Simon Percival
Independent Contractor in Australia | Simon Percival is a contingent subprocessor. Promethean has engaged this contractor to support Promethean’s Support Team for Australia and New Zealand region, but occasionally he can also support our clients globally. This contractor has access to Salesforce and, in performance of providing customer support services, this contractor may have access to customer data.
|
| Forge Business Technology
US Company
| Forge Business Technology is a contingent subprocessor. Promethean has engaged this contractor to support Promethean’s use of the Atlassian services, Jira and Confluence. This contractor assists with Jira projects, dashboards, reports, and also conducts maintenance in Promethean’s Atlassian cloud instance (Jira Software, Jira Work Management, Jira Service Management, and Confluence). In the performance of these services, this contractor may have access to customer data that may be included in Jira projects.
|
| Tenor | Tenor is a contingent subprocessor. Tenor, owned by Google, provides the Tenor functionality which has been added into Promethean services to enable users to interact with Tenor for the purpose of selecting images and short videos for inclusion of user-created content. In the event a user elects to access the Tenor functionality, Tenor may have access to limited user data (e.g., IP address) to enable Tenor to return the user requested content to the user. |
| Unsplash, Inc.
Canadian Company | Unsplash is a contingent subprocessor. The Unsplash functionality has been added into Promethean services to enable users to interact with Unsplash for the purpose of selecting images and short videos for inclusion of user-created content. In the event a user elects to access the Unsplash functionality, Unsplash may have access to limited user data (e.g., IP address) to enable Unsplash to return the user requested content to the user. |
| Sketchfab, Inc.
US Headquarters. Founded in France | Sketchfab is a contingent subprocessor. The Explain Everything iOS app uses Sketchfab to support 3D model search. In the event a user elects to access the Sketchfab functionality, Sketchfab may have access to limited user data (e.g., IP address) to enable Sketchfab to return the user requested content to the user. |
| CGI Technologies and Solutions Inc.
US Company (Delaware) | CGI Technologies is a contingent subprocessor. Promethean has engaged this service provider to support Promethean’s internal business operations systems including Cognos BI, Promethean’s ERP system (Infor LN ERP), IBM middleware, and other internal Promethean IT systems. This service provider does NOT have access to the user databases or production environments of Promethean products and services. This service provider’s access to any personal data is limited to personal data that may potentially be included in internal Promethean business systems such as, for example, the name of a business contact that may be included with an invoice Promethean has sent to a company, or an invoice Promethean has received from a company. |
| Envoy, Inc.
US Company | Envoy is a contingent subprocessor. Promethean has engaged the Envoy Visitors service to record limited personal data of visitors to Promethean office locations. While Promethean has only limited meetings with visitors in Promethean office locations, the Envoy service is utilized to capture data including the name, email address and company affiliation of visitors to Promethean’s office locations. The data collected is maintained as Promethean data within the Envoy service in a secure data facility located within the U.S. Envoy does not have access to the production environments of any Promethean products or services. |
Promethean reserves the right to add, remove or change service providers or sub-processors that Promethean may employ, contract with or use to support Promethean’s operation, maintenance or use of any Promethean application or service at any time, without notice, provided, however, Promethean may provide an updated list of the third party applications and/or service providers or sub-processors that Promethean uses promptly following receipt of any written request for such information from a Promethean customer or potential customer.