SUCCESSFINDER DATA PROCESSING AGREEMENT

Last updated: September 22, 2023

This Data Processing Agreement and its Annexes (“DPA”) reflects the Parties’ agreement with respect to the Processing of Personal Data by SuccessFinder on behalf of Customer in connection with the Services under the SuccessFinder’s Master Terms and Conditions available at: https://www.successfinder.com/terms-and-conditions-sept-2023/) (the “Agreement”). Terms not otherwise defined in this DPA will have the meaning as set forth in the Agreement.

WHEREAS the Customer wishes to contract certain Services, which include the processing of Personal Data, to SuccessFinder. Any reference to Data Processor or Service Provider in the DPA shall mean SuccessFinder. The Parties agree that in respect of any Personal Data processed in connection with this DPA that Customer shall be a “Person carrying on an enterprise”, “Data Controller”, “Business” or “Organization” as defined by Data Protection Laws.

WHEREAS the Parties seek to implement a data processing agreement that complies with the requirements of Data Protection Laws, as applicable, in relation to processing of personal data or personal information.

WHEREAS the Parties wish to specify their respective rights and obligations.

The Parties agree as follows:

1. Definitions

1.1Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.

1.2.Data Protection Laws” means all applicable worldwide legislation relating to data protection and privacy which applies to the respective Party in the role of Processing Personal Data in question under the Agreement, including, without limitation, the Act respecting the protection of personal information in the private sector, CQLR, P-39.1, the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5. and the European Data Protection Laws, in each case, as may be amended, superseded or replaced.

1.3.Data Subject” means the individual to whom Personal Data relates.

1.4.Europe” means the European Union, the European Economic Area and/or their member states, Switzerland and the United Kingdom.

1.5.European Data” means Personal Data that is subject to the protection of European Data Protection Laws.

1.6.European Data Protection Laws” means data protection laws applicable in Europe, including: (i) Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (“GDPR”); (ii) Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector; and (iii) applicable national implementations of (i) and (ii); or (iii) GDPR as it forms parts of the United Kingdom domestic law by virtue of Section 3 of the European Union (Withdrawal) Act 2018 (“UK GDPR”); and (iv) Swiss Federal Data Protection Act on 19 June 1992 and its Ordinance (“Swiss DPA”); in each case, as may be amended, superseded or replaced.

1.7.Instructions” means the written, documented instructions issued by the Customer to SuccessFinder, and directing the same to perform a specific or general action with regard to Personal Data.

1.8.Personal Data” means any information relating to an identified or identifiable individual where (i) such information is contained within Customer Data; and (ii) is protected similarly as personal data, personal information, or personally identifiable information under applicable Data Protection Laws.

1.9.Personal Data Breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored or otherwise Processed by SuccessFinder and/or its Sub-Processors in connection with the provision of the Services. “Personal Data Breach” will not include unsuccessful attempts or activities that do not compromise the security of Personal Data, including unsuccessful log-in attempts, pings, port scans, denial of service attacks, and other network attacks on firewalls or networked systems.

1.10.Processing” means any operation or set of operations which is performed on Personal Data, encompassing the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction or erasure of Personal Data. The terms “Process”, “Processes” and “Processed” will be construed accordingly.

1.11.Processor” means a natural or legal person, public authority, agency or other body which Processes Personal Data on behalf of the Controller.

1.12.Standard Contractual Clauses” means the standard contractual clauses annexed to the European Commission’s Decision (EU) 2021/914 of 4 June 2021 currently found at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914, as may be amended, superseded or replaced.

1.13.Sub-Processor” means any Processor engaged by SuccessFinder to assist in fulfilling its obligations with respect to the provision of the Services under the Agreement. Sub-Processors may include SuccessFinder’s Affiliates but exclude any SuccessFinder employee or consultant.

1.14.UK Addendum” means the International Data Transfer Addendum issued by the UK Information Commissioner under section 119A(1) of the Data Protection Act 2018 currently found at https://ico.org.uk/media/for-organisations/documents/4019539/international-data-transfer-addendum.pdf, as may be amended, superseded, or replaced.

In case of any conflict or inconsistency with the terms of the Agreement, this DPA will take precedence over the terms of the Agreement to the extent of such conflict or inconsistency.

2. Customer’s Obligations

2.1. Compliance with Laws. Within the scope of the Agreement and in its use of the Services, Customer will be responsible for complying with all requirements that apply to it under applicable Data Protection Laws with respect to its Processing of Personal Data and the instructions it issues to SuccessFinder. In particular but without prejudice to the generality of the foregoing, Customer acknowledges and agrees that it will be solely responsible for: (i) the accuracy, quality, and legality of Customer Data and the means by which it acquired Personal Data; (ii) complying with all necessary transparency and lawfulness requirements under applicable Data Protection Laws for the collection and use of the Personal Data, including obtaining any necessary consents and authorizations; (iii) ensuring it has the right to transfer, or provide access to, the Personal Data to SuccessFinder for Processing in accordance with the terms of the Agreement (including this DPA); and (iv) ensuring that its instructions to us regarding the Processing of Personal Data comply with applicable laws, including Data Protection Laws. Customer will inform SuccessFinder without undue delay if you are not able to comply with your responsibilities under this ‘Compliance with Laws’ section or applicable Data Protection Laws.

2.2. Instructions. The Parties agree that the Agreement (including this DPA), together with Customer’s use of the Services in accordance with the Agreement, constitute Customer’s complete instructions to SuccessFinder in relation to the Processing of Personal Data, so long as Customer may provide additional instructions during the Subscription Term that are consistent with the Agreement, the nature and lawful use of the Services.

3. SuccessFinder’s Obligations

3.1. Compliance with Instructions. SuccessFinder shall only Process Personal Data for the purposes described in this DPA or as otherwise agreed within the scope of your lawful instructions and as permitted by Section 13.2 of the Agreement (SuccessFinder Research), except where and to the extent otherwise required by Applicable Law. Customer acknowledges and agrees that if Customer shares or authorizes any third party or related party to receive or view Customer Data directly in the application or via the use of any application integrations, the further processing by such third party or related party is not covered by the DPA.

3.2. Conflict of Laws. If SuccessFinder becomes aware that it cannot Process Personal Data in accordance with Customer’s instructions due to a legal requirement under any applicable law, SuccessFinder will (i) promptly notify Customer of that legal requirement to the extent permitted by the applicable law; and (ii) where necessary, cease all Processing (other than merely storing and maintaining the security of the affected Personal Data) until such time as Customer issues new instructions with which it is able to comply. If this provision is invoked, SuccessFinder will not be liable to Customer under the Agreement for any failure to perform the applicable Services until such time as Customer issues new lawful Instructions with regard to the Processing.

3.3. Cooperation. Upon the Customer’s request, SuccessFinder shall provide the Customer with reasonable cooperation and assistance needed to fulfil the Customer’s obligation (if any) under Data Protection Laws to carry out a privacy impact assessment or any other similar assessment related to the Customer’s use of the Services, to the extent the Customer does not otherwise have access to the relevant information.

3.4. Security. SuccessFinder will implement and maintain appropriate technical and organizational measures to protect Personal Data from Personal Data Breaches, as described under Annex 2 to this DPA (“Security Measures“). Notwithstanding any provision to the contrary, SuccessFinder may modify or update the Security Measures at its discretion provided that such modification or update does not result in a material degradation in the protection offered by the Security Measures.

3.5. SuccessFinder’s Personnel. SuccessFinder shall ensure that its personnel and agents (“Personnel”) engaged in the Processing of Personal Data are informed of the confidential nature of the Personal Data, have received training regarding information security and privacy, and have executed written confidentiality agreements. SuccessFinder shall ensure that such confidentiality obligations survive the termination of the personnel engagement. SuccessFinder shall ensure that SuccessFinder’s access to Personal Data is limited to those Personnel performing Services in accordance with the Agreement and on a need-to-know basis.

3.6. Personal Data Incident Management and Notification. SuccessFinder maintains a written security incident response plan and shall notify Customer without undue delay, after becoming aware of a Personal Data Breach. To the extent known, SuccessFinder shall provide information to Customer about the Personal Data Breach including the nature and likely consequences of the Personal Data Breach, proposed measures to mitigate the Personal Data Breach, the categories of Personal Data and a point of contact for additional information. At Customer’s request, SuccessFinder will promptly provide Customer with such reasonable assistance as necessary to enable Customer to notify relevant Personal Data Breaches to competent authorities and/or affected Data Subjects, if Customer is required to do so under Data Protection Laws. SuccessFinder’s notification will be made in accordance with section 17.1 of the Agreement.

3.7. Anonymization of Personal Data. SuccessFinder will anonymize Customer Data no later than one hundred and twenty days following (a) a written request to this effect made by the Customer; or (b) the expiration of termination of the Agreement.

4. Data Subject Requests

The Customer Account provides Customer with a number of controls that Customer can use to retrieve, correct, delete or restrict Personal Data, which Customer can use to assist it in connection with its obligations under Data Protection Laws, including Customer’s obligations relating to responding to requests from Data Subjects to exercise their rights under applicable Data Protection Laws (“Data Subject Requests“). To the extent that Customer is unable to independently address a Data Subject Request through the Customer Account, then upon Customer’s written request SuccessFinder will provide reasonable assistance to Customer to respond to any Data Subject Requests or requests from data protection authorities relating to the Processing of Personal Data under the Agreement. If a Data Subject Request or other communication regarding the Processing of Personal Data under the Agreement is made directly to SuccessFinder, SuccessFinder will promptly inform Customer and will advise the Data Subject to submit their request to the Customer. Customer will be solely responsible for responding substantively to any such Data Subject Requests or communications involving Personal Data.

5. Sub-Processors

Customer agrees that SuccessFinder may engage Sub-Processors to Process Personal Data on Customer’s behalf. SuccessFinder currently appointed, as Sub-Processors, the third parties listed in Annex 3 to this DPA. When engaging new Sub-Processors, SuccessFinder will notify the Customer an update of Annex 3 (notice to be sent in accordance with Section 17.1 of the Agreement) at least ten (10) days in advance.

Where SuccessFinder engages Sub-Processors, it will impose data protection terms on the Sub-Processors that provide at least the same level of protection for Personal Data as those in this DPA (including, where appropriate, the Standard Contractual Clauses), to the extent applicable to the nature of the services provided by such Sub-Processors. SuccessFinder shall remain responsible for each Sub-Processor’s compliance with the obligations of this DPA and for any acts or omissions of such Sub-Processor that cause SuccessFinder to breach any of its obligations under this DPA or the Agreement.

6. Data Transfers

Customer acknowledges and agrees that SuccessFinder may access and Process Personal Data on a global basis as necessary to provide the Services in accordance with the Agreement, and in particular that Personal Data may be transferred to and Processed by SuccessFinder in the province of Québec (Canada) and to other jurisdictions where SuccessFinder’s Sub-Processors have operations. Wherever Personal Data is transferred outside its country of origin, each Party will ensure such transfers are made in compliance with the requirements of Data Protection Laws.

7. Demonstration of Compliance and Inspection Rights

Upon request by the Customer, SuccessFinder will make all information reasonably necessary to demonstrate compliance with this DPA available to the Customer. Customer acknowledges that the Services are hosted by SuccessFinder’s hosting Sub-Processor who maintains independently validated security programs (including SOC 2 and ISO 27001) and that SuccessFinder’s systems are audited annually as part of SOC 2 compliance and tested by an independent third party penetration testing firm. Upon request, SuccessFinder will supply (on a confidential basis) its SOC 2 report and executive summary copies of its penetration testing report(s) to Customer so that Customer can verify SuccessFinder’s compliance with this DPA. While it is the Parties’ intention ordinarily to rely on such certifications, audit report summaries and/or other documentation to verify SuccessFinder’s compliance with this DPA, following a confirmed Personal Data Breach or where a competent data protection authority requires it, Customer may provide SuccessFinder with thirty (30) days’ prior written notice requesting that a third-party conduct an inspection of SuccessFinder’s operations and facilities (“Inspection“) provided that (a) any Inspection will be conducted at Customer’s expense, (b) the Parties shall mutually agree upon the scope, timing and duration of the Inspection, (c) the Inspection shall not unreasonably impact SuccessFinder regular operations, (d) Customer will not have access to any files or systems that could result in the exposure of confidential information of other customers of SuccessFinder and (e) the Inspection will be restricted to operations and facilities under SuccessFinder’s control. Any certifications, audit report summaries and/or other relevant documentation provided by SuccessFinder, and the findings of any Inspection, will be subject to the confidentiality provisions of the Agreement.

8. Additional Provisions for European Data

8.1. Scope. This ‘Additional Provisions for European Data’ section will apply only with respect to European Data.

8.2. Roles of the Parties. When Processing European Data in accordance with Customer’s Instructions, the Parties acknowledge and agree that Customer is the Controller of European Data and SuccessFinder is the Processor.

8.3. Sub-Processor Agreements. For the purposes of Clause 9(c) of the Standard Contractual Clauses, Customer acknowledges that SuccessFinder may be restricted from disclosing Sub-Processor agreements but SuccessFinder will use reasonable efforts to require any Sub-Processor it appoints to permit it to disclose the Sub-Processor agreement to Customer and will provide (on a confidential basis) all information it reasonably can.

8.4. Transfer Mechanisms for Data Transfers.

8.4.1. SuccessFinder will not transfer European Data to any country or recipient not recognized as providing an adequate level of protection for Personal Data (within the meaning of applicable European Data Protection Laws), unless it first takes all such measures as are necessary to ensure the transfer is in compliance with applicable European Data Protection Laws. Such measures may include (without limitation) transferring such data to a recipient that is covered by a suitable framework or other legally adequate transfer mechanism recognized by the relevant authorities or courts as providing an adequate level of protection for Personal Data, to a recipient that has achieved binding corporate rules authorization in accordance with European Data Protection Laws, or to a recipient that has executed appropriate standard contractual clauses in each case as adopted or approved in accordance with applicable European Data Protection Laws.

8.4.2. Customer acknowledges that in connection with the performance of the Services, SuccessFinder may be a recipient of European Data in the province of Québec (Canada). Subject to sub-sections (C) and (D), the Parties agree that the Standard Contractual Clauses will be incorporated by reference and form part of the Agreement as follows:

(a) EEA Transfers. In relation to European Data that is subject to the GDPR (i) Customer is the “data exporter” and SuccessFinder is the “data importer”; (ii) the Module Two terms apply to the extent the Customer is a Controller of European Data and the Module Three terms apply to the extent the Customer is a Processor of European Data; (iii) in Clause 7, the optional docking clause applies; (iv) in Clause 9, Option 2 applies and changes to Sub-Processors will be notified ten (10) days in advance in accordance with the notification provision of the Agreement; (v) in Clause 11, the optional language is deleted; (vi) in Clauses 17 and 18, the Parties agree that the governing law and forum for disputes for the Standard Contractual Clauses will be determined in accordance with the Republic of Ireland (without reference to conflicts of law principles); (vii) the Annexes of the Standard Contractual Clauses will be deemed completed with the information set out in the Annexes of this DPA; and (viii) if and to the extent the Standard Contractual Clauses conflict with any provision of this DPA, the Standard Contractual Clauses will prevail to the extent of such conflict.

(b) UK Transfers. In relation to European Data that is subject to the UK GDPR, the Standard Contractual Clauses will apply in accordance with sub-section (a) and the following modifications (i) the Standard Contractual Clauses will be modified and interpreted in accordance with the UK Addendum, which will be incorporated by reference and form an integral part of the Agreement; (ii) Tables 1, 2 and 3 of the UK Addendum will be deemed completed with the information set out in the Annexes of this DPA and Table 4 will be deemed completed by selecting “neither party”; and (iii) any conflict between the terms of the Standard Contractual Clauses and the UK Addendum will be resolved in accordance with Section 10 and Section 11 of the UK Addendum.

(c) Swiss Transfers. In relation to European Data that is subject to the Swiss DPA, the Standard Contractual Clauses will apply in accordance with sub-section (a) and the following modifications (i) references to “Regulation (EU) 2016/679” will be interpreted as references to the Swiss DPA; (ii) references to “EU”, “Union” and “Member State law” will be interpreted as references to Swiss law; and (iii) references to the “competent supervisory authority” and “competent courts” will be replaced with the “the Swiss Federal Data Protection and Information Commissioner ” and the “relevant courts in Switzerland”.

8.4.3. If SuccessFinder cannot comply with its obligations under the Standard Contractual Clauses or is breach of any warranties under the Standard Contractual Clauses or UK Addendum (as applicable) for any reason, and Customer intends to suspend the transfer of European Data to SuccessFinder or terminate the Standard Contractual Clauses, or UK Addendum, Customer agrees to provide SuccessFinder with reasonable notice to enable it to cure such non-compliance and reasonably cooperate with us to identify what additional safeguards, if any, may be implemented to remedy such non-compliance. If SuccessFinder has not or cannot cure the non-compliance, Customer may suspend or terminate the affected part of the Services in accordance with the Agreement without liability to either Party (but without prejudice to any fees you have incurred prior to such suspension or termination).

9. General Provisions

9.1. Amendments. Notwithstanding anything else to the contrary in the Agreement and without prejudice to the ‘Compliance with Instructions’ or ‘Security’ sections of this DPA, SuccessFinder reserves the right to make any updates and changes to this DPA and SuccessFinder will let Customer know via email or via in-app notification through the Customer Account.

9.2. Severability. If any individual provisions of this DPA are determined to be invalid or unenforceable, the validity and enforceability of the other provisions of this DPA will not be affected.

9.3. Limitation of Liability. Each Party’s liability, taken in aggregate, arising out of or related to this DPA (and any other DPAs between the Parties) and the Standard Contractual Clauses (where applicable), whether in contract, tort or under any other theory of liability, will be subject to the limitations and exclusions of liability set out in Section 16.2 of the Agreement and any reference in such section to the liability of a Party means aggregate liability of that Party and all of its Affiliates under the Agreement (including this DPA). In no event will either Party’s liability be limited with respect to any individual’s data protection rights under this DPA (including the Standard Contractual Clauses) or otherwise.

9.4. Governing Law. This DPA will be governed by and construed in accordance with the laws of the province of Québec, unless required otherwise by Data Protection Laws.

 

 

Annex 1 – Details of Processing
A. LIST OF PARTIES

1. Data exporter:

Name: The Customer, as defined in Agreement

Address: The Customer’s address, as set out in the Agreement

Contact person’s name, position and contact details: The Customer’s contact details, as set out in the Agreement and/or as set out in the Customer Account.

Activities relevant to the data transferred under these Clauses: Processing of Personal Data in connection with Customer’s use of the Subscription Services under the Agreement.

Role (controller/processor): Controller

2. Data importer:

Name: SuccessFinder Inc.

Address: 1010 Sherbrooke West, Suite 1900A, Montreal, Quebec H3A 2R7

Contact person’s name, position and contact details: Marie-Christine Lemerise, Privacy Officer,

pr*****@su***********.com











Activities relevant to the data transferred under these Clauses: Processing of Personal Data in connection with Customer’s use of the Subscription Services under the Agreement.

Role (controller/processor): Processor

B. DESCRIPTION OF TRANSFER

1. Categories of data subjects whose personal data is transferred:

Employees, contractors or prospective employees or contractors of Customer and any other individuals at the request of the Customer

To the extent Customer is a distributing partner or a certified independent practitioner of SuccessFinder, the categories of data subjects also include the employees, contractors or prospective employees or contractors of the end-customers of the Customer.

2. Categories of Personal Data Transferred:

Participants:
Name
Surname
Email address
Authentication credentials to use access the Participant Application
Forced-choice answers to the items in the SuccessFinder assessment.
Results Data (i.e. scores on the different constructs measured by SuccessFinder).

Customer Account Users:
Name
Surname
Email address
Authentication credentials to use access the Customer Account
Information regarding trend, usage and activities within the Customer Account

If Customer Account Users id being trained or certified on the use of the Platform and Subscribed Application: information regarding user’s progress and status on completion of training modules and final results/score.

3. Frequency of the transfer: Continuous

4. Nature of the Processing: Personal Data will be Processed in accordance with the Agreement (including this DPA) and may be subject to the following Processing activities:

  1. Storage and other Processing necessary to provide and maintain the Subscription Services; and/or
  2. Disclosure in accordance with the Agreement (including this DPA) and/or as compelled by Applicable Law.

5. Purpose of the transfer and further processing: SuccessFinder will Process Personal Data as necessary to provide the Subscription Services pursuant to the Agreement, as further specified in the Statement of Work, and as further instructed by Customer in its use of the Subscription Services.

6. Period for which Personal Data will be retained: Subject to the ‘Anonymization of Personal Data’ section of this DPA, SuccessFinder will Process Personal Data for the duration of the Agreement, unless otherwise instructed by Customer.

C. Competent Supervisory Authority:

For the purposes of the Standard Contractual Clauses, the supervisory authority that will act as competent supervisory authority will be determined in accordance with GDPR.

 

 

Annex 2 – Security Measures

General

SuccessFinder has adopted security controls and practices for SuccessFinder Platform that are designed to protect the confidentiality, integrity, and availability of Customer Data and to protect Customer Data from any unauthorized or unlawful processing activities.

SuccessFinder security practices establish and govern areas of security applicable to SuccessFinder Platform. SuccessFinder personnel (including employees, contractors and interns) are subject to the SuccessFinder information security practices and any additional policies that govern their employment or the services they provide to SuccessFinder.

SuccessFinder implements a multilayered defense security strategy where network, operating system, database, and software security practices and procedures are integrated for strong internal controls, governance, and oversight.

Security Awareness & Training

SuccessFinder staff that may have access to Customer Data are subject to confidentiality agreements. SuccessFinder staff are required to periodically complete an information security awareness training course.

Secure Disposal

Policies and procedure are in place to ensure the confidentiality, integrity and availability of Customer Data, and to protect it from disclosure, improper alteration, or destruction.

System & Data Access Controls

SuccessFinder applies, among others the following controls: authentication via passwords and/or multi-factor authentication, documented authorization and change management processes, and logging of access. Log-ins to the infrastructure components used by SuccessFinder Platform are logged and logical access is restricted and protected.

SuccessFinder’s access to Customer Data is restricted to authorized staff on a need to know basis. In addition, SuccessFinder provides a mechanism by which Customer controls access to Customer Data by authorized Customer Account Users.

Physical Security Safeguards

Physical safeguards of the data center hosting SuccessFinder Platform, including Customer’s hosted data is under the responsibility of a third-party platform-as-a-service platform retained by SuccessFinder and is not under control of SuccessFinder.

User Encryption for External Connections

Customer’s access to SuccessFinder Platform is through a secure communication protocol provided by SuccessFinder. If access is through a Transport Layer Security (TLS) enabled connection, that connection is negotiated for at least 128-bit encryption. TLS is implemented or configurable for SuccessFinder Platform.

Data Segregation

Customer Data is logically segregated from the content of other customers hosted in the SuccessFinder Platform environments.

SuccessFinder Internal Information Security Policies

SuccessFinder information security policies establish and govern areas of security applicable to SuccessFinder Platform and to the Customer’s use of SuccessFinder Platform. SuccessFinder personnel are subject to the SuccessFinder Corporate Information Security Policies (including a Data Protection Policy) and any additional policies that govern their employment or the services they provide to SuccessFinder.

External Reviews

SuccessFinder employs third parties to conduct independent reviews of SuccessFinder Platform security in the following area:

  • SOC2 attestation for the Security & Availability Trust Service Principles (based on Statement on Standards for Attestation Engagements (SSAE)
  • Annual penetration test by a third-party provider

Monitoring

SuccessFinder uses a variety of software tools to monitor the availability and performance of the SuccessFinder Platform. This includes:

  • Changes affecting the systems
  • Review of privileged access to SuccessFinder systems
  • Static & dependency scans

 

 

Annex 3 – List of Current Sub-Processors

To help SuccessFinder deliver the Subscription Services, we engage Sub-Processors to assist with our data processing activities. Before SuccessFinder engages any Sub-processor, SuccessFinder performs a due diligence on the Sub-Processor’s data protection practices in order to ensure that it provides the required level of protection for Personal Data. Please see below the list of SuccessFinder’s Sub-Processors:

 Name

Jurisdiction

Services

Google Cloud Platform

Canada

 Cloud hosting

SendGrid (by Twillio, Inc.) 

 USA

 Email delivery services

 ChurnZero, Inc. 

 USA

 Client engagement and success management 

 Docebo Inc.

 Canada

 Training/certification (Learning Management System) 

 Microsoft (Power BI, Office 365 including Teams) 

 Canada

 Office Productivity and Collaboration

Data visualization tool (Power BI) 

 Microsoft Dynamics

 Canada

 Customer Relation Management (CRM) 

 CookieYes

 United Kingdom

 Cookie consent Manager