List of sub-processors 20230125

Previous version available here

Appendix 2 – List of approved sub-processors

Last updated 25 January 2023

1. Name: Synthesia Inc.

Address: 874 Walker Road, Suite C, City of Dover, DE 19904, United States

Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer


2. Name: Synthesia B.V.

Address: Grote Bickersstraat 74, 1013 KS Amsterdam, Netherlands

Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

3. Name: Synthesia GmbH

Address: Pacellistraße 8, 80333 München, Germany

Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

4. Name: Amazon Web Services EMEA SARL

Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg

Contact person’s name, position and contact details: Laura Wainwright, AWS account manager lauwai@amazon.com

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Web hosting, data storage and compute for video processing services. Identity data is transmitted and stored for the purpose of user account setup and authorisation. Audio/Video data of a person is stored and transmitted for the purpose of video creation.


5. Name: MongoDB Limited

Address: Building Two, Number One Ballsbridge, Dublin 4, Ballsbridge, Dublin, Ireland

Contact person’s name, position and contact details: MongoDB’s DPO at privacy@mongodb.com

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Structuring and storing production data

6. Name: Google Cloud EMEA Limited

Address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland

Contact person’s name, position and contact details: Emil Ochotta, Data Protection Officer, https://support.google.com/cloud/contact/dpo

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): email service provider used for communicating data to Processor

7. Name: Stripe Payments Europe, Ltd

Address: One Spencer Dock, North Wall Quay, Dublin 1

Contact person’s name, position and contact details: Adi Gilad, Data Protection Officer, dpo@stripe.com

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Payment provider only if the payment is made via credit card

8. Name: The Rocket Science Group LLC d/b/a Mailchimp

Address: 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA

Contact person’s name, position and contact details: Meghan Farmer, Data Protection Officer, dpo@mailchimp.com

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Automated user notifications. Identity data is transmitted for the purpose of providing email notifications to end users.

9. Name: Kaleido AI GmbH

Address: Ungargasse 37/BT1/3.3, 1030 Wien, Austria

Contact person’s name, position and contact details: Michal Dzujka, Customer Success Manager, michal@kaleido.ai

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Video processing to prepare a custom avatar. Video data of a person is transmitted and stored for a time-limited period for the purpose of pre-processing video to create a custom avatar for the service.

10. Name: Salesforce UK Limited

Address: Floor 26 Salesforce Tower, 110 Bishopsgate, London EC2N 4AY, United Kingdom

Contact person’s name, position and contact details: Lindsey Finch, DPO, privacy@salesforce.com

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Customer relationship management. Account emails are stored with the company information.

11. Name: Intercom R&D Unlimited Company

Address: 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland

Contact person’s name, position and contact details: Intercom Privacy Team, legal@intercom.io

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Support ticketing system and widget

12. Name: Surfboard Technology Ltd

Address: 320 City Road, London, EC1V 2NZ, United Kingdom

Contact person’s name, position and contact details: Elva Tucker, Customer Success Manager, elva@teamsurfboard.com

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Processing the support tickets raised via Intercom for allocation, scheduling, and prioritization with the support personnel.


13. Name: Slack Technologies, Inc.

Address: 4th Floor, One Park Place, Hatch Street Upper, Dublin 2, Ireland

Contact person’s name, position and contact details: Lindsey Finch, Executive Vice President, Global Privacy & Product Legal, dpo@slack.com

Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Internal company communication and content moderation management for the service. Identity data is transmitted and stored for the purpose of content review on the service.