What is a Sub-processor?

When Thinkwork engages third party service providers in our capacity as a data processor for our customers’ personal data, the General Data Protection Regulation (“GDPR”) calls these third-party service providers sub-processors.  Sub-processors are service providers who have or potentially will have access to or process personal data that Thinkwork processes for, and on behalf of, Thinkwork’s customers.

Thinkwork uses third party companies as listed below (each, a “sub-processor”) to support Thinkwork in delivering it Services and to assist Thinkwork with it data processing activities on behalf of Thinkwork customers in accordance with the terms of a written contract between Thinkwork and the sub-processor.

Thinkwork maintains an up-to-date list of names and locations of all of our sub-processors below.

Sub-Processor Nature and purpose of processing Location of processing External links relating to security
AWS Infrastructure Provider:  provides hosting, storage and content distribution network (CDN) services USA https://aws.amazon.com/service-terms/

https://d1.awsstatic.com/Controller_to_Processor_SCCs.pdf

https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf

Mongo Infrastructure Provider:  provides database and data backup services USA https://www.mongodb.com/legal/dpa