Carrot Subprocessors

Current as of October 6, 2022

Subscribe to an RSS feed to be notified when we add new Carrot Subprocessors (note: you will need to cut and paste the "Subscribe to an RSS feed" URL into an RSS Feed Reader to monitor updates).

Sumo Logic, Inc.

Name And Address Of The Sub-Processor

Sumo Logic, Inc. 305 Main Street, Redwood City, CA

Contact Person’s Name, Position And Contact Details

Jennifer McCord, VP Finance & Chief Accounting Officer, jmccord@sumologic.com

Description Of Processing (Including Subject Matter, Nature And Duration Of The Processing As Well As A Lear Delimitation Of Responsibilities In Case Several Sub-Processors Are Authorized)

Log aggregation

Specific Technical And Organizational Measures To Betaken By The Sub-Processor To Be Able To Provide Assistance To Customer

Sub-processor has created roles and responsibilities to respond to any data subject request, if any, including policies and processes.

Zendesk Inc

Name And Address Of The Sub-Processor

Zendesk Inc., 989 Market St. San Francisco, CA 94103 USA

Contact Person’s Name, Position And Contact Details

legalnotice@zendesk.com 888-670-4887

Description Of Processing (Including Subject Matter, Nature And Duration Of The Processing As Well As A Lear Delimitation Of Responsibilities In Case Several Sub-Processors Are Authorized)

Providing customer support and troubleshooting services in the United States

Specific Technical And Organizational Measures To Betaken By The Sub-Processor To Be Able To Provide Assistance To Customer

None

Snowflake Inc.

Name And Address Of The Sub-Processor

Snowflake Inc., Suite 3A 106 East Babcock Street Bozeman, Montana 59715

Contact Person’s Name, Position And Contact Details

privacy@snowflake.com

Description Of Processing (Including Subject Matter, Nature And Duration Of The Processing As Well As A Lear Delimitation Of Responsibilities In Case Several Sub-Processors Are Authorized)

Cloud-based data warehouse that provides the infrastructure, storage, and processing engine to power data reporting and analysis.

Specific Technical And Organizational Measures To Betaken By The Sub-Processor To Be Able To Provide Assistance To Customer

S, and include, but are not limited to, Dynamic Data Masking and End-to-End Encryption for data in transit and at rest.

Fivetran Inc.

Name And Address Of The Sub-Processor

Fivetran Inc., 1221 Broadway Floor 20 Oakland, CA 94612

Contact Person’s Name, Position And Contact Details

Description Of Processing (Including Subject Matter, Nature And Duration Of The Processing As Well As A Lear Delimitation Of Responsibilities In Case Several Sub-Processors Are Authorized)

Fivetran will process Carrot's data (including Customer data) to facilitate migration of data from SaaS software databases into Carrot's data warehouse.

Specific Technical And Organizational Measures To Betaken By The Sub-Processor To Be Able To Provide Assistance To Customer

Domo Inc.

Name And Address Of The Sub-Processor

Domo Inc., 772 East Utah Valley Drive American Fork, UT 84003

Contact Person’s Name, Position And Contact Details

Description Of Processing (Including Subject Matter, Nature And Duration Of The Processing As Well As A Lear Delimitation Of Responsibilities In Case Several Sub-Processors Are Authorized)

Providing short-term caching to optimize data functions (e.g., loading a dashboard) and may include personal data

Specific Technical And Organizational Measures To Betaken By The Sub-Processor To Be Able To Provide Assistance To Customer

Google LLC

Name And Address Of The Sub-Processor

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA

Contact Person’s Name, Position And Contact Details

https://support.google.com/cloud/contact/dpo

Description Of Processing (Including Subject Matter, Nature And Duration Of The Processing As Well As A Lear Delimitation Of Responsibilities In Case Several Sub-Processors Are Authorized)

Internal business data storage in the United States

Specific Technical And Organizational Measures To Betaken By The Sub-Processor To Be Able To Provide Assistance To Customer

None

Microsoft Corp

Name And Address Of The Sub-Processor

Microsoft Corp., One Microsoft Way, Redmond, WA 98052 USA

Contact Person’s Name, Position And Contact Details

microsoft.com/enus/trustcenter/privacy/gdproverview

Description Of Processing (Including Subject Matter, Nature And Duration Of The Processing As Well As A Lear Delimitation Of Responsibilities In Case Several Sub-Processors Are Authorized)

Providing data hosting services in the United States

Specific Technical And Organizational Measures To Betaken By The Sub-Processor To Be Able To Provide Assistance To Customer

None

Action Verb LLC

Name And Address Of The Sub-Processor

Action Verb LLC, 7135 Bermuda Rd Las Vegas, NV 89119 USA

Contact Person’s Name, Position And Contact Details

Joseph Buszka, COO & General Counsel legal@files.com

Description Of Processing (Including Subject Matter, Nature And Duration Of The Processing As Well As A Lear Delimitation Of Responsibilities In Case Several Sub-Processors Are Authorized)

Providing storage services relating to the transfer of member data to Carrot’s database in the United States

Specific Technical And Organizational Measures To Betaken By The Sub-Processor To Be Able To Provide Assistance To Customer

None

Amazon Web Services, Inc.

Name And Address Of The Sub-Processor

Amazon Web Services, Inc. P.O. Box 81226 Seattle, WA 98108-1226

Contact Person’s Name, Position And Contact Details

Customers are prompted to contact AWS Compliance Support at https://aws.amazon.com/contact-us/compliance-support/

Description Of Processing (Including Subject Matter, Nature And Duration Of The Processing As Well As A Lear Delimitation Of Responsibilities In Case Several Sub-Processors Are Authorized)

Cloud-based provider that hosts the front-end assets that derive from our web-based Carrot application in the United States.

Specific Technical And Organizational Measures To Betaken By The Sub-Processor To Be Able To Provide Assistance To Customer

AWS provides core security and compliance controls and features (e.g., Identity & Access Management, Data Protection, Detection) to protect Customer data.