Infrastructure Sub-processors

A list of entities providing cloud infrastructure and dedicated server facilities and used by Klevu (as of May 2018) , is provided below. Klevu owns and controls logical access to the infrastructure maintained by these entities, while these entities maintain the physical security of the servers, network and the data center.

Entity Name Entity Type Corporation Location
Amazon Web Services, Inc.
see https://aws.amazon.com/blogs/security/all-aws-services-gdpr-ready/
Cloud Service Provider United States
Google LLC
see https://cloud.google.com/security/gdpr/
Cloud Service Provider United States
OVH SAS
see https://www.ovh.co.uk/personal-data-protection/gdpr.xml
Server Provider France
Sigmatic Oy Server Provider Helsinki
Oy Creanova Hosting Solutions Ltd Server Provider Helsinki
DigitalOcean
see https://www.digitalocean.com/security/gdpr/
Server Provider New York

Service Specific Sub-processors

Klevu works with certain third-parties to provide a specific functionality within its Services. These third parties are Sub-processors with limited use indicated below and access to Subscriber Data in order to provide the relevant functionality.

Entity Name Purpose Corporation Location
Proinity LLC KeyCDN provides content distribution (CDN), security and DNS services for web traffic to and from the services. The primary information KeyCDN has access to are the search API calls initiated from individual websites, their responses (cached on their servers) and end-user IP addresses. see https://www.keycdn.com/gdpr Switzerland
APIgurus.com APIgurus.com offers a service that provides geographic information and other data associated with specific Internet protocol addresses. The primary information the APIgurus.com has is the end-user’s IP address without any further detail of the end-user. United States
Stripe It is a payment processing gateway. It has access to the Subscriber’s email address. The other information in Stripe (such as credit card number and any other credentials required to make a payment) are collected by the Stripe after accepting the terms of service presented to the customer by Stripe. see https://stripe.com/guides/general-data-protection-regulation United States
Paypal It is a payment processing gateway. It has access to the Subscriber’s email address. The other information in Stripe (such as credit card number and any other credentials required to make a payment) are collected by the Stripe after accepting the terms of service presented to the customer by Stripe. see https://www.paypal.com/stories/uk/getting-gdpr-ready United States
Hubspot It is a CRM system used for managing relations with customers. It has access to the Subscriber’s primary contact details such as name, address, contact number and business details. see https://www.hubspot.com/data-privacy/gdpr United States
Freshdesk Customer support system, primary used for interacting with customers to deal with technical and non-technical issues. It has access to subscriber’s email address, information on the issues reported by the subscriber and often the server access details. see https://freshdesk.com/gdpr United States
Finago Oy Klevu accounting is run by Procountor application by Finago Oy. It contains our customer invoicing related information. See https://finago.com/fi/meista/ajankohtaista/gdpr/ Finland
Talouskonsul-
tointi Mertaoja Oy
Klevu uses Talouskonsultointi Mertaoja Oy to perform certain parts of accounting. The accounting system contains invoicing and contact information about Klevu customers and providers. Finland

Klevu Oy Sub-processors

The following entities are the current members / subsidiaries of the Klevu Oy. Accordingly, they function as sub-processors to provide the Services.

Entity Name Country
Klevu Oy Finland
Klevu Inc United States
Klevu India Pvt Ltd India