Carrot Subprocessors

Current as of October 6, 2022

Subscribe to an RSS feed to be notified when we add new Carrot Subprocessors (note: you will need to cut and paste the "Subscribe to an RSS feed" URL into an RSS Feed Reader to monitor updates).

Action Verb LLC

Name and Address of the sub-processor
Action Verb LLC, 7135 Bermuda Rd Las Vegas, NV 89119 USA
Contact person’s name, position and contact details

Joseph Buszka, COO & General Counsel legal@files.com

Description of processing (including subject matter, nature and duration of the processing as well as a lear delimitation of responsibilities in case several sub-processors are authorized)
Providing storage services relating to the transfer of member data to Carrot’s database in the United States
Specific technical and organizational measures to betaken by the sub-processor to be able to provide assistance to Customer

Sub-processor has created roles and responsibilities to respond to any data subject request, if any, including policies and processes.

Google LLC

Name and Address of the sub-processor
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Contact person’s name, position and contact details
Description of processing (including subject matter, nature and duration of the processing as well as a lear delimitation of responsibilities in case several sub-processors are authorized)
Internal business data storage in the United States
Specific technical and organizational measures to betaken by the sub-processor to be able to provide assistance to Customer

Sub-processor has created roles and responsibilities to respond to any data subject request, if any, including policies and processes. 

Microsoft Corp

Name and Address of the sub-processor
Microsoft Corp., One Microsoft Way, Redmond, WA 98052 USA
Contact person’s name, position and contact details
Description of processing (including subject matter, nature and duration of the processing as well as a lear delimitation of responsibilities in case several sub-processors are authorized)
Providing data hosting services in the United States
Specific technical and organizational measures to betaken by the sub-processor to be able to provide assistance to Customer

Sub-processor has created roles and responsibilities to respond to any data subject request, if any, including policies and processes.

Zendesk Inc

Name and Address of the sub-processor
Zendesk Inc., 989 Market St. San Francisco, CA 94103 USA
Contact person’s name, position and contact details
Description of processing (including subject matter, nature and duration of the processing as well as a lear delimitation of responsibilities in case several sub-processors are authorized)
Providing customer support and troubleshooting services in the United States
Specific technical and organizational measures to betaken by the sub-processor to be able to provide assistance to Customer

Sub-processor has created roles and responsibilities to respond to any data subject request, if any, including policies and processes.

Sumo Logic, Inc.

Name and Address of the sub-processor
Sumo Logic, Inc. 305 Main Street, Redwood City, CA
Contact person’s name, position and contact details

Jennifer McCord, VP Finance & Chief Accounting Officer, jmccord@sumologic.com

Description of processing (including subject matter, nature and duration of the processing as well as a lear delimitation of responsibilities in case several sub-processors are authorized)
Log aggregation
Specific technical and organizational measures to betaken by the sub-processor to be able to provide assistance to Customer

Sub-processor has created roles and responsibilities to respond to any data subject request, if any, including policies and processes.

Amazon Web Services, Inc.

Name and Address of the sub-processor
Amazon Web Services, Inc. P.O. Box 81226 Seattle, WA 98108-1226
Contact person’s name, position and contact details

Customers are prompted to contact AWS Compliance Support at https://aws.amazon.com/contact-us/compliance-support/

Description of processing (including subject matter, nature and duration of the processing as well as a lear delimitation of responsibilities in case several sub-processors are authorized)
Cloud-based provider that hosts the front-end assets that derive from our web-based Carrot application in the United States.
Specific technical and organizational measures to betaken by the sub-processor to be able to provide assistance to Customer

AWS provides core security and compliance controls and features (e.g., Identity & Access Management, Data Protection, Detection) to protect Customer data.

Snowflake Inc.

Name and Address of the sub-processor
Snowflake Inc., Suite 3A 106 East Babcock Street Bozeman, Montana 59715
Contact person’s name, position and contact details
Description of processing (including subject matter, nature and duration of the processing as well as a lear delimitation of responsibilities in case several sub-processors are authorized)
Cloud-based data warehouse that provides the infrastructure, storage, and processing engine to power data reporting and analysis.
Specific technical and organizational measures to betaken by the sub-processor to be able to provide assistance to Customer

Snowflake's Security & Compliance Reports - Snowflake, and include, but are not limited to, Dynamic Data Masking and End-to-End Encryption for data in transit and at rest.

Domo Inc.

Name and Address of the sub-processor
Domo Inc., 772 East Utah Valley Drive American Fork, UT 84003
Contact person’s name, position and contact details
Description of processing (including subject matter, nature and duration of the processing as well as a lear delimitation of responsibilities in case several sub-processors are authorized)
Providing short-term caching to optimize data functions (e.g., loading a dashboard) and may include personal data
Specific technical and organizational measures to betaken by the sub-processor to be able to provide assistance to Customer

Domo has established a Trust Program to implement following security, compliance, and privacy controls and features (e.g., Bring Your Own Key (BYOK) encryption, Responsible Disclosure Program)

Fivetran Inc.

Name and Address of the sub-processor
Fivetran Inc., 1221 Broadway Floor 20 Oakland, CA 94612
Contact person’s name, position and contact details

Data Protection Officer: Alexis Kirkman; 

Senior Privacy Counsel: Seth Batey; privacy@fivetran.com

Description of processing (including subject matter, nature and duration of the processing as well as a lear delimitation of responsibilities in case several sub-processors are authorized)
Fivetran will process Carrot's data (including Customer data) to facilitate migration of data from SaaS software databases into Carrot's data warehouse.
Specific technical and organizational measures to betaken by the sub-processor to be able to provide assistance to Customer

Fivetran’s security measures can be found at Fivetran, and include, but are not limited to, Transport Layer Security, Physical & Environmental Security, and Logical Access Controls.