Timely Sub-Processors
We enlist the help of tools and services from a handful of companies – AKA “sub-processors” – to deliver the best products possible. These tools can require access to certain personal data, which is only granted when it is absolutely necessary to the provision of our service. Likewise, we only ever enter into fully GDPR-compliant data processing agreements.
Here’s the complete list of sub-processors we use at Timely:
Sub-processors
| Tool name | Legal name & location | Website | Data server location | Description of processing | Personal data processed | Transfer mechanisms |
|---|---|---|---|---|---|---|
| Amazon Web Services | Amazon Web Services EMEA SARL, Luxembourg | https://www.amazon.com | EU | Hosting and cloud computing | Name, email, applications worked on, geolocation, integrations used | N/A |
| Google Cloud | Google Cloud EMEA Limited, Dublin, Ireland | https://cloud.google.com | EU | Geolocation | Geolocation | N/A |
| Twilio Sendgrid | Twilio Ireland Ltd (SendGrid), Dublin, Ireland | https://sendgrid.com | USA | Notification services | Name and email | EU-US Data Privacy Framework (adequacy decision); SCCs as fallback |
| Cloudflare | Cloudflare, Inc, San Francisco, CA, USA | https://www.cloudflare.com | USA | Provides edge network security and content delivery. | Processes source IP addresses and HTTP connection metadata from end-user traffic for the purpose of threat detection, traffic filtering, and request routing. | EU-US Data Privacy Framework (adequacy decision); SCCs as fallback |
| Pusher Channels | Pusher Ltd, London, England | https://www.pusher.com | EU | Notification services | Name and Email | N/A |
| Fly.io | Fly.io, Inc, 2261 Market Street #4990, San Francisco, California 94114, United States | https://fly.io | EU | Hosting and cloud computing | Some authentication data and activities recorded by the Memory Tracker for Timely | N/A |
| Supabase | Supabase, Inc., Delaware, USA/Singapore | https://supabase.com/ | Ireland | Storage and processing of activities recorded by the Memory Tracker for Timely, configurations, and data imported from 3rd parties via Integrations | User ID, IP, email address, and other identifying information required to associate user to uploads, activities recorded by the Memory Tracker for Timely, and customer-controlled data imported from 3rd party integrations. | N/A |
| OpenAI Developer Platform | OpenAI OpCo LLC | https://platform.openai.com/ | USA | AI processing and language model services | Data as submitted by users through the Service, which may include name, email, and user-generated content | Standard Contractual Clauses |
Contact our Data Protection Officer at any point if you would like more information about our sub-processors.