In delivery of our Services, MetaCompliance engages third-party sub-processors as outlined below.
Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs), where applicable, are in place to ensure compliance with Data Protection Laws.
Sub-Processor | Purpose | Location | Sub-Processors |
Microsoft Azure (contracted via Microsoft Operations Ireland Ltd) | Hosts the Services in the Cloud | Microsoft Azure Default data centre (DC) locations: United Kingdom Customers: DC in U.K. Canadian Customers: DC in Canada. German Customers: DC in Germany European Customers outside of Germany: DC in Netherlands and Ireland | Further sub-processors available here |
Amazon Web Services (contracted with “AWS Europe”) | Transactional email provider | Amazon Web Services data centre (DC) locations: United Kingdom Customers: DC in U.K. Canadian Customers: DC in Canada. German Customers: DC in Germany European Customers outside of Germany: DC in Ireland | Further sub-processors available here |
Metacompliance Group entities (MetaCompliance Limited, Metacompliance Ireland Ltd, MetaCompliance GmbH, MOCH A/S, MetaCompliance Ireland Ltd Sucursal Portugal) | Customer account services and support services | United Kingdom Ireland Germany Denmark Portugal (in line with where entities are incorporated) |
2. ADDITIONAL PROCESSING AND SUB-PROCESSORS FOR USE OF CONTENT TO COURSE
A) Open AI
Metacompliance DC / Region | Home / Azure DC Location | Deployment | Personal Data Processed | Retention |
IRE | West Europe (NL) | Data Zone (EU) | Other than Personal Data entered by Customers (e.g. in response to a prompt or Personal Data included in the content provided to create the course) no Customer Personal Data will be processed by this sub-processor. | No prompts or generations are stored in the model. Additionally, prompts and generations are not used to train, retrain, or improve the base models. |
DACH | Germany West Central | Data Zone (EU) | As per above. | As per above. |
NL | West Europe (NL) | Data Zone (EU) | As per above. | As per above. |
CAN | Canada East | Standard (Canada East) | As per above. | As per above. |
UK | UK South | Standard (UK South) | As per above. | As per above. |
US | North Central US | Standard (North Central US) | As per above. | As per above. |
B) Microsoft Document Intelligence and Azure Translator Services
Metacompliance DC / Region | Home / Azure DC Location | Processing | Personal Data Processed | Storage (temp 24hrs) |
IRE | North Europe (Ire) | North Europe (Ire) | Other than Personal Data included in the content provided to create the course, no Customer Personal Data will be processed by this sub-processor. | North Europe (Ire) |
DACH | Germany West Central | Germany West Central | As per above. | Germany West Central |
NL | West Europe (NL) | West Europe (NL) | As per above. | West Europe (NL) |
CAN | Canada Central | Canada Central | As per above. | Canada Central |
UK | UK South | UK South | As per above. | UK South |
US | North Central US | North Central US | As per above. | North Central US |
3. ADDITIONAL PROCESSING AND SUB-PROCESSORS FOR USE OF PHISH CO-PILOT
Sub-Processors | Personal Data Processed | Region | Retention/Storage |
Service: ChatGPT | Other than Personal Data entered by Customers (e.g. in response to a prompt or Personal Data included in the content provided to create the course) no Customer Personal Data will be processed by this sub-processor. | Deployed : West Europe Processing : Global Standard (any region) | No prompts or generations are stored in the model. Additionally, prompts and generations are not used to train, retrain, or improve the base models. |
Service: Text embedding | As per above. | As per above. | As per above. |
4. ADDITIONAL PROCESSING AND SUB-PROCESSORS FOR USE OF VIRTUAL PRESENTER
Sub-Processor | Personal Data Processed | Region | Retention/Storage |
Colossyan Inc. | Free text containing personal data (if any) provided in Customer Materials through scripts or other content. Customer confirms that no sensitive data will be transferred to the Processor. | Processing in United States, United Kingdom and Hungary (these are Colossyan and Colossyan affiliate locations). | 24 hours. Hard delete within 48 hours. |
Stay informed about our sub-processors. Provide your email address below to receive updates regarding our sub-processor list.
Request a free demo today and see how our world-class cyber Security Awareness Training could benefit your organisation.
The demo only takes 30 minutes of your time and you don’t need to install any software.
Request Demo - Header Test
Request a free demo today and see how our world-class cyber Security Awareness Training could benefit your organisation.
The demo only takes 30 minutes of your time and you don’t need to install any software.
Request Demo - Header Test