MetaCompliance Sub-Processors
In delivery of our Services, MetaCompliance engages third-party sub-processors as outlined below.
Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs), where applicable, are in place to ensure compliance with Data Protection Laws.
1. SUB-PROCESSORS REQUIRED FOR DELIVERY OF ALL SERVICES
| Sub-Processor | Purpose | Location | Sub-Processors |
| Microsoft Azure (contracted via Microsoft Operations Ireland Ltd) | Hosts the Services in the Cloud | Microsoft Azure Default data centre (DC) locations: United Kingdom Customers: DC in U.K. Canadian Customers: DC in Canada. American Customers: DC in United States of America German Customers: DC in Germany European Customers outside of Germany: DC in Netherlands and Ireland | Further sub-processors available here |
| Amazon Web Services (contracted with “AWS Europe”) | Transactional email provider | Amazon Web Services data centre (DC) locations: United Kingdom Customers: DC in U.K. Canadian Customers: DC in Canada. American Customers: DC in United States of America German Customers: DC in Germany European Customers outside of Germany: DC in Ireland | Further sub-processors available here |
| Userpilot, Inc. | Support customer usage of the platform | France | Amazon Web Services, France |
| Metacompliance Group entities (MetaCompliance Limited, Metacompliance Ireland Ltd, MetaCompliance GmbH, MOCH A/S, MetaCompliance Ireland Ltd Sucursal Portugal), MetaCompliance France, Junglemap AS, Junglemap AB, Junglemap Benelux B.V | Customer account services and support services | United Kingdom Germany Denmark Ireland Portugal France Norway Sweden The Netherlands (as applicable and in line with each entity’s place of incorporation) |
2. TRANSLATION SERVICES FOR CUSTOMERS WITH MULTI-LANGUAGE SUBSCRIPTIONS
| Sub-Processor | Personal Data Processed | Processing Locations | Retention/Deletion |
| Weglot SAS | Name, email address, IP address and any Personal Data included in Customer Data/Content translated by Weglot SAS. | Frankfurt, Germany Weglot Sub-processors as provided for here: Trust Center – Weglot | Retained for the duration of the Subscription Term and deleted 30 days thereafter. |
3. ADDITIONAL PROCESSING AND SUB-PROCESSORS FOR USE OF CONTENT TO COURSE
A) Open AI
| Metacompliance DC / Region | Home / Azure DC Location | Deployment | Personal Data Processed | Retention |
| IRE | West Europe (NL) | Data Zone (EU) | Other than Personal Data entered by Customers (e.g. in response to a prompt or Personal Data included in the content provided to create the course) no Customer Personal Data will be processed by this sub-processor. | No prompts or generations are stored in the model. Additionally, prompts and generations are not used to train, retrain, or improve the base models. |
| DACH | Germany West Central | Data Zone (EU) | As per above. | As per above. |
| NL | West Europe (NL) | Data Zone (EU) | As per above. | As per above. |
| CAN | Canada East | Standard (Canada East) | As per above. | As per above. |
| UK | UK South | Standard (UK South) | As per above. | As per above. |
| US | North Central US | Standard (North Central US) | As per above. | As per above. |
B) Microsoft Document Intelligence and Azure Translator Services
| Metacompliance DC / Region | Home / Azure DC Location | Processing | Personal Data Processed | Storage (temp 24hrs) |
| IRE | North Europe (Ire) | North Europe (Ire) | Other than Personal Data included in the content provided to create the course, no Customer Personal Data will be processed by this sub-processor. | North Europe (Ire) |
| DACH | Germany West Central | Germany West Central | As per above. | Germany West Central |
| NL | West Europe (NL) | West Europe (NL) | As per above. | West Europe (NL) |
| CAN | Canada Central | Canada Central | As per above. | Canada Central |
| UK | UK South | UK South | As per above. | UK South |
| US | North Central US | North Central US | As per above. | North Central US |
4. ADDITIONAL PROCESSING AND SUB-PROCESSORS FOR USE OF PHISH GENERATOR
| Sub-Processors | Personal Data Processed | Region | Retention/Storage |
| Service: ChatGPT | Other than Personal Data entered by Customers (e.g. in response to a prompt or Personal Data included in the content provided to create the course) no Customer Personal Data will be processed by this sub-processor. | Deployed : West Europe Processing : Global Standard (any region) | No prompts or generations are stored in the model. Additionally, prompts and generations are not used to train, retrain, or improve the base models. |
| Service: Text embedding | As per above. | As per above. | As per above. |
5. ADDITIONAL PROCESSING AND SUB-PROCESSORS FOR USE OF VIRTUAL PRESENTER
| Sub-Processor | Personal Data Processed | Region | Retention/Storage |
| Colossyan Inc. | Free text containing personal data (if any) provided in Customer Materials through scripts or other content. Customer confirms that no sensitive data will be transferred to the Processor. | Processing in United States, United Kingdom and Hungary (these are Colossyan and Colossyan affiliate locations). | 24 hours. Hard delete within 48 hours. |
| Service Provider | Service Provided | Location |
| Superlative Enterprises Pty Ltd | Breach Detection | United States |
The above named Service Provider is included here for the purposes of transparency.
Sub-Processor Updates
Stay informed about our sub-processors. Provide your email address below to receive updates regarding our sub-processor list.