Sub-processors
- Yuri (Unlicensed)
- Yuri Lapin
- 1 Release Management Sub-processors
- 1.1 Google Analytics (Google, Inc.)
- 1.2 Calendly (Calendly, Inc.)
- 1.3 Google Calendar, Google Meet (Google, Inc.)
- 1.4 Zoom (Zoom Video Communications, Inc.)
- 1.5 Atlassian Marketplace (Atlassian Pty Ltd)
- 1.6 Make.com (Celonis, Inc.)
- 1.7 Mailchimp (The Rocket Science Group, LLC)
- 1.8 Pipedrive (Pipedrive, Inc.)
- 1.9 Slack (Slack Technologies, LLC or Slack Technologies Limited)
- 1.10 Amplitude (Amplitude, Inc.)
- 1.11 Segment (Twilio, Inc.)
- 1.12 journy.io
- 1.13 AWS (Amazon Web Services, Inc.)
- 1.14 Grafana Labs (Raintank, Inc.)
- 1.15 DataDog (Datadog, Inc.)
Release Management Sub-processors
Release Management uses the third party entities below (each, a “sub-processor”) to process personal data on behalf of Release Management Customers and in accordance with contract terms between Release Management and the sub-processor to uphold Release Management’s commitments in Release Management's Data Processing Addendum (DPA).
Release Management carries out an internal onboarding due diligence and annual compliance reviews of its sub-processors and imposes obligations on its sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of personal data is protected to the standards required by applicable data protection laws (according Release Management Information Security, Data Management, Third Party Management and Risk Management Policies).
Further information relating to sub-processor security measures can be found via the external links below. For each sub-processor below, processing of personal data will be for the duration of use of the applicable service(s) by the customer, and for the retention periods as set out in the customer’s agreement with Release Management and any product documentation.
We recommend you become a Watcher for this Confluence page to receive updates on any changes to sub-processors list. The process of changes to the sub-processors list is outlined in Section 2.10 of DPA.
Sub-processor | Applicable Release Management Products | Nature and Purpose of Processing | Categories of personal data | Location of Processing | Security and Supplemental Measures |
|---|---|---|---|---|---|
Google Analytics (Google, Inc.)
| All Cloud and DC Products | Analytics service used to improve content of our Apps listing pages on Atlassian Marketplace and our own Website. | Device and connection information, for example:
Information on the use of the Pages, for example:
| Globally | |
Calendly (Calendly, Inc.) | All Cloud and DC Products | Online appointment booking automation service used to easily book demo or meet-up sessions with us. | Contact person data who is requesting the session, namely:
| US | |
Google Calendar, Google Meet (Google, Inc.) | All Cloud and DC Products | Online Calendar and default video conferencing solution we use to schedule, handle and follow up meetings requested by Customer End Users. Also used to automatically create appointments from Calendly (see above) | same as above | Globally | |
Zoom (Zoom Video Communications, Inc.) | All Cloud and DC Products | Secondary video conferencing solution we use to schedule, handle and follow up meetings requested by Customer End Users. Also used to automatically create appointments from Calendly (see above) | same as above | US |
|
Atlassian Marketplace (Atlassian Pty Ltd)
| All Cloud and DC Products | The Atlassian Marketplace is an online marketplace for Cloud and DC applications that are designed to interoperate with Atlassian’s software and cloud offerings, Release Management Products in particular. | Technical and Billing Contacts Information, for example:
Customers' Atlassian Solution Partner, for example:
Additional Release Management/Atlassian Product license information, for example:
| US | |
Make.com (Celonis, Inc.) | All Cloud and DC Products | No Code Application to make daily data exports from Atlassian Marketplace and import it into Mailchimp, Segment, Slack private channel (outlined below) | same as above | US | https://www.make.com/en/privacy-notice “We operate under an information security program that is ISO 27001 certified and runs within an infrastructure compliant with SOC2.” |
Mailchimp (The Rocket Science Group, LLC) | All Cloud and DC Products | Email marketing, automation, and CRM used to send updates (including security updates), information about our products, changes in offering and other marketing we deem interesting to your company (our Customers). | same as above | US | Mailchimp Data Processing Addendum Preview | Mailchimp Mailchimp Data Security and Privacy | Mailchimp
|
Pipedrive (Pipedrive, Inc.) | All Cloud and DC Products | Email marketing, automation, and CRM used to send updates (including security updates), information about our products, changes in offering and other marketing we deem interesting to your company (our Customers). | same as above | US | |
Slack (Slack Technologies, LLC or Slack Technologies Limited) | All Cloud and DC Products | A number of private channels for Release Management owned workspace to instantly update Release Management representatives on key changes in Customers’ licensing | Technical Contacts Information, for example:
Additional Release Management/Atlassian Product license information, for example:
| US | Data processing addenda | Legal
|
Amplitude (Amplitude, Inc.) | All Cloud and DC Products | Product analytics service used to improve the customer experience and functionality of the App. | Information on the use of our Products, for example:
Additional Release Management/Atlassian Product license information, for example:
| US |
|
Segment (Twilio, Inc.) | All Cloud and DC Products | Twilio Segment is a customer data platform (CDP) that helps us collect, clean, and activate our customer data. | Technical and Billing Contacts Information, for example:
Customers' Atlassian Solution Partner, for example:
Information on the use of our Products, for example:
Additional Release Management/Atlassian Product license information, for example:
| US | |
journy.io | All Cloud and DC Products | The SaaS Growth Platform, empowering SMBs to be Data-Driven & Product-Led, in particular helping us to orchestrate Customer journey with us. | same as above | EU | https://www.journy.io/legal/data-processing https://www.journy.io/legal/privacy-policy
|
MixPanel | Advanced Agile & Kanban Boards Only | Product Analytics and Churn reduction platform Testing as alternative to Amplitude and journy.io | same as above | EU
| |
Flywheel | Advanced Agile & Kanban Boards Only | Churn reduction platform Testing as alternative to Amplitude and journy.io | same as above | US | |
AWS (Amazon Web Services, Inc.) | Cloud Products Only | Hosting provider for our Cloud Applications distributed and scalable clusters. | Personal data defined in App specific tables of Exhibit A, Part A of DPA. | East 2 Zone, Ohio, US | |
Storage of our Cloud Applications backups. | Personal data defined in App specific tables of Exhibit A, Part A of DPA. | Nuremberg, Germany, EU
| |||
Grafana Labs (Raintank, Inc.) | Cloud Products Only | Log management and analysis used to proactively monitor our Cloud Apps health and fix issues. | Log information of End user actions with our Cloud Apps, for example:
| US | |
DataDog (Datadog, Inc.) | Cloud Products Only | Log management and analysis used to proactively monitor our Cloud Apps health and fix issues. | Log information of End user actions with our Cloud Apps, for example:
| US |