We require our sub-processors to satisfy equivalent obligations as those required from us (as a Data Processor) as set forth in our Terms of Service, including but not limited to the requirements to:

• process personal data in accordance with data controller’s (i.e. Customer’s) documented instructions (as communicated in writing to the relevant sub-processor by us);
• in connection with their sub-processing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws;
• provide regular training in security and data protection to personnel to whom they grant access to personal data;
• implement and maintain appropriate technical and organisational measures (including measures consistent with those to which we are contractually committed to adhere insofar as they are equally relevant to the sub-processor’s processing of personal data on our behalf)
• promptly inform us about any actual or potential security breaches; and cooperate with us in order to facilitate requests from data controllers, data subjects, or data protection authorities, as applicable.
  
  

This notice does not give Customers any additional rights or remedies and should not be construed as a binding agreement. The information herein is to provide the actual list of third-party sub-processors and content delivery networks used by us as of the date of this notice (which we may use in the delivery and support of its Services).