Skip to main content
All CollectionsGDPR, Security and LegalGDPR
Sub-processors and international data transfer
Sub-processors and international data transfer

Who our sub-processors are and how we handle your data internationally

Updated over 2 months ago

Sub-processors

Bright Interactive use a select number of sub-processors to support the delivery of our services. Each sub-processor has been assessed for their ability to provide appropriately secure services and are themselves providing relevant assurances, policies and Data Processing Agreements that we have entered into.

We are also monitoring the ongoing compliance work of our providers and adjusting our own processes to make the most of any additional privacy options available.

Our current list of Dash sub-processors that process client data are:

  • Amazon Web Services - Infrastructure, file storage and processing services (including AWS Bedrock) for our hosted products. Based in USA.

  • Google Inc - Email and administrative support applications. Based in USA.

  • HubSpot Inc - Processing of user information for notifications and service provision. Based in USA.

  • Blitline LLC - Image processing. Based in USA, with data remaining in the EU.

  • Auth0 - Authorisation and user management. Based in USA.

  • Mezmo - Application logging. Based in USA.

  • Microsoft Entra ID - Cloud services, including geolocation services. Based in USA.

  • Intercom - Customer Support platform. Based in USA.

  • Brightcove Inc - Video encoding. Based in USA.

  • ConvertAPI - Document conversion. Based in EU.

  • Datadog, Inc - Application logging. Based in USA, with data being stored in the EU.

  • Frill - Feature request tool, used to track who has requested, voted and commented on different Dash features. Data processed in USA.

  • Mixpanel - Recording and analysing user statistics.

    Data stored in the EU.

  • Hightouch - Used for syncing data between systems. Data hosted in EU (Ireland).

  • Chargebee - Billing and subscription management with data stored in the EU.

  • Airbyte - Used for syncing data between systems with data processed in the EU.

  • Google BigQuery - BigQuery is a Google Inc. product and is a data warehouse that allows us to analyse and store large quantities of data from various sources for Dash.

  • Looker Studio - Looker Studio is a Google Inc. product that is a data visualiser and allows us to integrate data from various sources to turn into dashboards and reports.

  • Google Analytics 4 (GA4) - GA4 is a Google Inc. product. It’s an analytics service that collects data on both our Dash website and Dash applications through integrations with Google BigQuery, Google Tag Manager and Chargebee.

  • TL;DV - TL;DV is a meeting recorder. It collects data of any recorded meeting with the Dash team.

  • Vitally.io - Provides centralised visibility of usage and other metrics for the conducting of Customer Success activities.

The following subprocessors are opt-in. These are not mandatory parts of the Dash service but at user discretion may be enabled:

  • Canva - Your information collected through the Service will be stored and processed in the United States, Australia and any other country in which Canva or its subsidiaries, affiliates or service providers maintain facilities. Detailed information can be found here: https://www.canva.com/policies/privacy-policy/

    Enabled by linking your Dash account to your Canva account.

  • Santa Cruz Software - provide LinkrUI, for Adobe and Microsoft integration. Based in USA and GDPR compliant. Full details can be found in their privacy policy. Enabled by explicitly signing up to use LinkrUI with Dash.

  • cloudHQ - cloud data migration. Based in USA, data not stored by cloudHQ.
    Enabled by migrating your existing assets to Dash.

  • Learnworlds - elearning platform for the Dash Academy. Data processed in both EU and USA.

These lists will be kept up to date with any changes to our sub-processors. You can sign up to receive email notifications about proposed changes by e-mailing help@dash.app or by starting a conversation with us using the chat button on this page.

International data transfer

Customer data in Dash is hosted by Amazon Web Services (AWS) in their EU regions. For more information about our hosting and security practices, please see our Security Overview page.

Additionally, the GDPR gives multiple ways for personal data to be transferred outside of the EU. This is relevant for the processing of personal data that may occur, upon request of our customers, for support and consultancy purposes. 

Our Terms and Conditions include the Standard Contractual Clauses incorporated with the UK addendum in order to ensure the controlled transfer of data outside of the UK. Additionally, all of our providers make strong commitments related to the restriction of access to the data that is stored with them.

Summarised statement of purpose for our GA4 integration and reporting

Our GA4 set-up aims to provide comprehensive insights on marketing performance and improve our overall service offering.

To do this, we are integrating data from the following sources:

  • Our website

  • Dash applications themselves

  • HubSpot

  • Chargebee

  • GA4 and Google Tag Manager via Airbyte

  • Google BigQuery for integrating data sources for analysis in Looker studio

The information we’re passing through the systems (detailed above) comprises data on:

  • Website performance

  • Customer revenue and subscriptions

  • User behaviour in the Dash application

  • Marketing performance

We will keep data on Google Analytics, Google BigQuery and other linked platforms for 36 months.

If you have any questions about personal data, then please contact privacy@dash.app

Did this answer your question?