Our sub-processors are certified according to data protection laws

We only work with vendors and sub-processors who meet our high data protection requirements as well as the legal requirements. We review our vendors and sub-processors to ensure they are adhering to GDPR and to Standard Contractual Clauses. We sign the relevant data processing agreements (DPA) with regards to that.

We process only minimal necessary data

For an individual user, we only store a minimum set of personal data required for user authentication and identification, which are name and email. Entering a phone number is optional on signup. This is the only personal user data we can ever share with sub-processors.

We do not process any special category data. Company billing data is only shared with sub-processors listed under 'Payments and billing'.

We carefully check that only necessary data is shared with subcontractors for the intended purpose.

GDPR ready

Overview of our sub-processors

Technical Infrastructure

Auth0

  • Auth0 is used to authenticate users.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Auth0 uses standard contract clauses.

  • Further details on data processing can be found here.

AWS

  • AWS is used for hosting all data.

  • The server location is Germany. Thus AWS is subject to GDPR and offers European data protection standards.

  • Further details on data processing can be found here.

Cloudflare

  • Cloudflare is used for the security and reliability of our external-facing resources.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Cloudflare uses standard contract clauses.

  • Further details on data processing can be found here.

ipapi

  • ipapi is used for IP address analysis for geolocalization.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. ipapi uses standard contract clauses.

  • Further details on data processing can be found here.

Make

  • Make an automation platform.

  • The server location of the stored data is in the United States. Make uses standard contract clauses.

  • Further details on data processing can be found here.

MongoDB Atlas

  • MongoDB Atlas is a technical database service.

  • No uploaded media files are passed on to this sub-processor.

  • The server location of the stored data is in Germany. MongoDB Atlas uses standard contract clauses.

  • Further details on data processing can be found here.

Pusher

  • Pusher is a technical service that hosts software components for real-time functionality.

  • No uploaded media files are passed on to this sub-processor.

  • Location: GBR. Pusher complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

Transloadit

  • Transloadit is an MPaaS (Media Processing as a Service) solution.

  • We use Transloadit for transcoding uploaded files.

  • Location: Germany. Transloadit uses standard contract clauses.

  • Further details on data processing can be found here.

Tray

  • Tray is a service for enabling software integrations.

  • Location: USA. Tray uses standard contract clauses.

  • Further details on data processing can be found here.

Billing and Payments

Better Proposals

  • Better Proposal is an invoicing service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: GBR. Better Proposal complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

Billomat

  • Billomat is a billing service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: DEU. Billomat complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

ChartMogul

  • ChartMogul is a financial reporting service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: DEU. ChartMogul complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

DATEV

  • DATEV is an accounting service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: DEU. DATEV complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

Quaderno

  • Quaderno is an invoicing service.

  • Location: ESP. Quaderno complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

Stripe

  • Stripe is a payment processing service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Stripe uses standard contract clauses.

  • Stripe processes the data provided in the payment process. Filestage itself has no access to the payment data. Stripe will only process data if these are provided by the person concerned and the person concerned has given his consent to the data processing. Further details on data processing can be found here.

Sales, Customer Support and Marketing

Aircall

  • Aircall is a voice over IP service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: France. Aircall uses standard contract clauses.

  • Further details on data processing can be found here.

Asana

  • Asana is a project management service.

  • Location: USA. Asana uses standard contract clauses.

  • Further details on data processing can be found here.

Calendly

  • Calendly is a schedule management service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Calendly uses standard contract clauses.

  • Further details on data processing can be found here.

ClickCease

  • ClickCease is a service for preventing click and ad fraud.

  • No uploaded media files are passed on to this sub-processor.

  • Location: EEA. ClickCease uses standard contract clauses.

  • Further details on data processing can be found here.

CopyFactory

  • CopyFactory is a service for personalized messaging.

  • No uploaded media files are passed on to this sub-processor.

  • Location: Canada. CopyFactory uses standard contract clauses.

  • Further details on data processing can be found here.

Crossbeam

  • Crossbeam is a service to identify customers we have in common with our partners.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Crossbeam uses standard contract clauses.

  • Further details on data processing can be found here.

Demio

  • Demio is a SaaS solution for hosting webinars.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Demio uses standard contract clauses.

  • Further details on data processing can be found here.

DocuSign

  • DocuSign is an electronic agreement management service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. DocuSign uses standard contract clauses.

  • Further details on data processing can be found here.

Domo

  • Domo is a customer analytics service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Domo uses standard contract clauses.

  • Further details on data processing can be found here.

Dovetail

  • Dovetail is a service to analyze, synthesize, store, and share customer research.

  • No uploaded media files are passed on to this sub-processor.

  • Location: Australia. Dovetail uses standard contract clauses.

  • Further details on data processing can be found here.

FullStory

  • FullStory is a customer support service.

  • Location: USA. FullStory uses standard contract clauses.

  • Further details on data processing can be found here.

G2

  • G2 is a customer feedback service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. G2 uses standard contract clauses.

  • Further details on data processing can be found here.

GeotargetingWP

  • GeotargetingWP is a service to geotarget content or create geo-targeted redirects.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. GeotargetingWP uses standard contract clauses.

  • Further details on data processing can be found here.

Google Analytics

  • Google Analytics is a product analytics service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Google Analytics uses standard contract clauses.

  • Further details on data processing can be found here.

Google Workspace

  • Google Workspace is a productivity service.

  • Location: USA. Google Workspace uses standard contract clauses.

  • Further details on data processing can be found here.

Grammarly

  • Grammarly is a writing assistant service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Grammarly uses standard contract clauses.

  • Further details on data processing can be found here.

Heap

  • Heap is a product analytics service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Heap uses standard contract clauses.

  • Further details on data processing can be found here.

Hotjar

  • Hotjar is a website analytics service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: Malta. Hotjar uses standard contract clauses.

  • Further details on data processing can be found here.

HubSpot

  • HubSpot is a customer care service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. HubSpot uses standard contract clauses.

  • Further details on data processing can be found here.

Intercom

  • Intercom is a customer support service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Intercom uses standard contract clauses.

  • Further details on data processing can be found here.

Lavender

  • Lavender is an email writing assistant service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Lavender uses standard contract clauses.

  • Further details on data processing can be found here.

Legal Monster

  • Legal Monster is a cookie management service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: Denmark. Legal Monster uses standard contract clauses.

  • Further details on data processing can be found here.

LinkedIn Sales Navigator

  • LinkedIn Sales Navigator is a sales management service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. LinkedIn Sales Navigator uses standard contract clauses.

  • Further details on data processing can be found here.

Loom

  • Loom is a video recording service.

  • Location: USA. Loom uses standard contract clauses.

  • Further details on data processing can be found here.

Make

  • Make is a workflow automation service.

  • Location: USA. Make uses standard contract clauses.

  • Further details on data processing can be found here.

Mailchimp

  • Mailchimp is a marketing service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: Canada. Mailchimp uses standard contract clauses.

  • Further details on data processing can be found here.

Mailjet

  • Mailjet is an email service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: France. Mailjet uses standard contract clauses.

  • Further details on data processing can be found here.

Mention

  • Mention is a monitoring and social media SaaS solution.

  • We use Mention to monitor and analyze online conversations about us and centrally manage our social media posts.

  • No uploaded media files are passed on to this sub-processor.

  • Location: France. Mention complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

Mindstamp

  • Mindstamp is an interactive video creation service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Mindstamp uses standard contract clauses.

  • Further details on data processing can be found here.

Monday

  • Monday is a project management service.

  • Location: Israel. Monday complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

OMR

  • OMR is a customer feedback service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: Germany. OMR complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

Paved

  • Paved is a newsletter sponsorship service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Paved uses standard contract clauses.

  • Further details on data processing can be found here.

Pingdom

  • Pingdom is a service for monitoring website performance and availability.

  • No uploaded media files are passed on to this sub-processor.

  • Location: Sweden. Pingdom complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

Productboard

  • Productboard is a service for obtaining product feedback.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Productboard uses standard contract clauses.

  • Further details on data processing can be found here.

Profitwell

  • Profitwell is a subscription analytics service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Profitwell uses standard contract clauses.

  • Further details on data processing can be found here.

Recoro

  • Recoro is a service for real-time call transcriptions.

  • No uploaded media files are passed on to this sub-processor.

  • Location: Germany. Recoro is subject to GDPR.

  • Further details on data processing can be found here.

Reviewflowz

  • Reviewflowz is a SaaS solution for tracking online reviews.

  • We use Reviewflowz to track Filestage user reviews on Captera and G2.

  • No uploaded media files are passed on to this sub-processor.

  • Location: France. Reviewflowz complies with the European rules on data protection (GDPR).

  • Further details on data processing can be found here.

SatisMeter

  • SatisMeter is a service for customer surveys.

  • No uploaded media files are passed on to this sub-processor.

  • Location: CZE. SatisMeter is subject to GDPR.

  • Further details on data processing can be found here.

Segment

  • Segment is a service for managing customer data.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Segment uses standard contract clauses.

  • Further details on data processing can be found here.

Slack

  • Slack is a communication service.

  • Location: USA. Slack uses standard contract clauses.

  • Further details on data processing can be found here.

Typeform

  • Typeform is a service for obtaining customer feedback.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Typeform uses standard contract clauses.

  • Further details on data processing can be found here.

UserGems

  • UserGems is a service for tracking contacts' job changes and identifying them as new prospects in the event of a change.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. UserGems uses standard contract clauses.

  • Further details on data processing can be found here.

Vidyard

  • Vidyard is a video messaging service.

  • Location: USA. Vidyard uses standard contract clauses.

  • Further details on data processing can be found here.

Vitally

  • Vitally is a customer care service.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Vitally uses standard contract clauses.

  • Further details on data processing can be found here.

Zapier

  • Zapier is a service for automating workflows.

  • No uploaded media files are passed on to this sub-processor.

  • Location: USA. Zapier uses standard contract clauses.

  • Further details on data processing can be found here.

Zoom

  • Zoom is a video conferencing service.

  • Location: USA. Zoom uses standard contract clauses.

  • Further details on data processing can be found here.

Did this answer your question?