Sub-processors


Release Management Sub-processors

Release Management uses the third party entities below (each, a “sub-processor”) to process personal data on behalf of Release Management Customers and in accordance with contract terms between Release Management and the sub-processor to uphold Release Management’s commitments in Release Management's Data Processing Addendum (DPA).

Release Management carries out an internal onboarding due diligence and annual compliance reviews of its sub-processors and imposes obligations on its sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of personal data is protected to the standards required by applicable data protection laws (according Release Management Information Security, Data Management, Third Party Management and Risk Management Policies).

Further information relating to sub-processor security measures can be found via the external links below. For each sub-processor below, processing of personal data will be for the duration of use of the applicable service(s) by the customer, and for the retention periods as set out in the customer’s agreement with Release Management and any product documentation.

We recommend you become a Watcher for this Confluence page to receive updates on any changes to sub-processors list. The process of changes to the sub-processors list is outlined in Section 2.10 of DPA.

Sub-processor

Applicable Release Management Products

Nature and Purpose of Processing

Categories of personal data

Location of Processing

Security and Supplemental Measures

Sub-processor

Applicable Release Management Products

Nature and Purpose of Processing

Categories of personal data

Location of Processing

Security and Supplemental Measures

Google Analytics (Google, Inc.)

 

All Cloud and DC Products

Analytics service used to improve content of our Apps listing pages on Atlassian Marketplace and our own Website.

Device and connection information, for example:

  • IP address

  • Cookie information

  • Device information

  • Browser information

Information on the use of the Pages, for example:

  • Event Name (i.e., what action the user performed)

  • Event Timestamp

  • Page URL

  • Referring URL

  • Atlassian User ID

Globally

Data Processing Terms

https://policies.google.com/privacy?hl=en-US

Calendly (Calendly, Inc.)

All Cloud and DC Products

Online appointment booking automation service used to easily book demo or meet-up sessions with us.

Contact person data who is requesting the session, namely: 

  • Email address

  • Full name

  • Any other information contact person provide to us in connection with the support matter and/or booking to conduct a session, plus responses to the surveys/questions (if applicable)

US

https://calendly.com/dpa

https://calendly.com/privacy

Google Calendar, Google Meet (Google, Inc.)

All Cloud and DC Products

Online Calendar and default video conferencing solution we use to schedule, handle and follow up meetings requested by Customer End Users. Also used to automatically create appointments from Calendly (see above)

same as above

Globally

Data Processing Terms

https://policies.google.com/privacy?hl=en-US

Zoom (Zoom Video Communications, Inc.)

All Cloud and DC Products

Secondary video conferencing solution we use to schedule, handle and follow up meetings requested by Customer End Users. Also used to automatically create appointments from Calendly (see above)

same as above

US

DPA

https://explore.zoom.us/en/privacy/

 

Atlassian Marketplace (Atlassian Pty Ltd)

 

All Cloud and DC Products

The Atlassian Marketplace is an online marketplace for Cloud and DC applications that are designed to interoperate with Atlassian’s software and cloud offerings, Release Management Products in particular.

Technical and Billing Contacts Information, for example:

  • Full name

  • Email address

  • Office / address

  • Office / phone number

  • Company / organization

  • Company web-site URL

Customers' Atlassian Solution Partner, for example:

  • Full name

  • Email address

  • Company / organization

  • Company web-site URL

Additional Release Management/Atlassian Product license information, for example:

  • App entitlement id and number

  • Host entitlement id and number

  • Host product edition and frequency of renewals

  • License type and status

  • License start and end dates

  • License tier

US

https://www.atlassian.com/legal/data-processing-addendum

https://www.atlassian.com/legal/privacy-policy#what-this-policy-covers

Make.com (Celonis, Inc.)

All Cloud and DC Products

No Code Application to make daily data exports from Atlassian Marketplace and import it into Mailchimp, Segment, Slack private channel (outlined below)

same as above

US

DPA

https://www.make.com/en/privacy-notice

“We operate under an information security program that is ISO 27001 certified and runs within an infrastructure compliant with SOC2.”

Mailchimp (The Rocket Science Group, LLC)

All Cloud and DC Products

Email marketing, automation, and CRM used to send updates (including security updates), information about our products, changes in offering and other marketing we deem interesting to your company (our Customers).

same as above

US

https://mailchimp.com/legal/data-processing-addendum/

https://mailchimp.com/about/security/

 

Pipedrive (Pipedrive, Inc.)

All Cloud and DC Products

Email marketing, automation, and CRM used to send updates (including security updates), information about our products, changes in offering and other marketing we deem interesting to your company (our Customers).

same as above

US

DPA

Privacy Policy

Slack (Slack Technologies, LLC or Slack Technologies Limited)

All Cloud and DC Products

A number of private channels for Release Management owned workspace to instantly update Release Management representatives on key changes in Customers’ licensing

Technical Contacts Information, for example:

  • Full name

  • Company / organization

  • Company web-site URL

Additional Release Management/Atlassian Product license information, for example:

  • App entitlement id and number

  • Host product edition and frequency of renewals

  • License type and status

  • License start and end dates

  • License tier

US

Data processing addenda | Legal

Privacy policy | Legal

 

Amplitude (Amplitude, Inc.)

All Cloud and DC Products

Product analytics service used to improve the customer experience and functionality of the App.

Information on the use of our Products, for example:

  • Event Name (i.e., what action the user performed)

  • Event Timestamp

  • Page URL

  • Referring URL

  • Atlassian User ID

Additional Release Management/Atlassian Product license information, for example:

  • App entitlement id and number

  • Host entitlement id and number

  • Host product edition and frequency of renewals

  • License type and status

  • License start and end dates

  • License tier

US

Data Processing Addendum

Privacy Notice

 

Segment (Twilio, Inc.)

All Cloud and DC Products

Twilio Segment is a customer data platform (CDP) that helps us collect, clean, and activate our customer data.

Technical and Billing Contacts Information, for example:

  • Full name

  • Email address

  • Office / address

  • Office / phone number

  • Company / organization

  • Company web-site URL

Customers' Atlassian Solution Partner, for example:

  • Full name

  • Email address

  • Company / organization

  • Company web-site URL

Information on the use of our Products, for example:

  • Event Name (i.e., what action the user performed)

  • Event Timestamp

  • Page URL

  • Referring URL

  • Atlassian User ID

Additional Release Management/Atlassian Product license information, for example:

  • App entitlement id and number

  • Host entitlement id and number

  • Host product edition and frequency of renewals

  • License type and status

  • License start and end dates

  • License tier

US

https://www.twilio.com/en-us/trust-center

https://www.twilio.com/en-us/legal/sub-processors

journy.io

All Cloud and DC Products

The SaaS Growth Platform, empowering SMBs to be Data-Driven & Product-Led, in particular helping us to orchestrate Customer journey with us.

same as above

EU

https://www.journy.io/legal/data-processing

https://www.journy.io/legal/privacy-policy

 

MixPanel

Advanced Agile & Kanban Boards Only

Product Analytics and Churn reduction platform

Testing as alternative to Amplitude and journy.io

same as above

EU

 

https://mixpanel.com/legal/dpa/

https://mixpanel.com/legal/privacy-policy

Flywheel

Advanced Agile & Kanban Boards Only

Churn reduction platform

Testing as alternative to Amplitude and journy.io

same as above

US

https://www.tryflywheel.com/privacy-policy

AWS (Amazon Web Services, Inc.)

Cloud Products Only

Hosting provider for our Cloud Applications distributed and scalable clusters.

Personal data defined in App specific tables of Exhibit A, Part A of DPA.

East 2 Zone, Ohio, US

https://docs.aws.amazon.com/whitepapers/latest/navigating-gdpr-compliance/aws-data-processing-addendum-dpa.html

https://aws.amazon.com/privacy/

Storage of our Cloud Applications backups.

Personal data defined in App specific tables of Exhibit A, Part A of DPA.

Nuremberg, Germany, EU

 

Grafana Labs (Raintank, Inc.)

Cloud Products Only

Log management and analysis used to proactively monitor our Cloud Apps health and fix issues.

Log information of End user actions with our Cloud Apps, for example:

  • Anonymized user ID

  • App configuration excluding any data that may potentially be deemed personal data

US

https://grafana.com/legal/data-processing-agreement/

https://grafana.com/legal/privacy-policy/

DataDog (Datadog, Inc.)

Cloud Products Only

Log management and analysis used to proactively monitor our Cloud Apps health and fix issues.

Log information of End user actions with our Cloud Apps, for example:

  • Anonymized user ID

  • App configuration excluding any data that may potentially be deemed personal data

US

https://www.datadoghq.com/legal/data-processing-addendum/

https://www.datadoghq.com/legal/privacy/