Sub-processor List

FeedOtter engages sub-processors to assist in providing FeedOtter’ Services.

This document does not give You any additional rights or remedies and should not be construed as a binding agreement between You and FeedOtter. This information is provided to illustrate FeedOtter’ engagement process for sub-processors and set forth the list of third-party sub-processors.

What is a Sub-processor?

A sub-processor is a third-party data processor engaged by FeedOtter, processing Personal Data. FeedOtter has adequate data transfer mechanisms in place with each sub-processor.

Due Diligence

FeedOtter recognizes that the use of sub-processors creates potential risks that must be properly managed. Before entering into any third-party relationships, we take deliberate steps to conduct an assessment of risk arising from the vendor relationship.

Any sub-processor who has access to FeedOtter Personal Data are expected to demonstrate their security policies, processes, and procedures and prove that they are able to provide adequate protection of such data, including against misuse or compromise. For more information, see our Vendor Data Protection Requirements page.

Contractual Safeguards

FeedOtter requires its sub-processors to satisfy similar obligations as those required by FeedOtter (as Your data processor) in FeedOtter’ Data Processing Addendum (“DPA”), including:

• Processing Personal Data in accordance with the data controller’s (Your) documented instructions;
• Ensuring personnel engaged in the Processing of Personal Data are informed of the confidential nature of the Personal Data and are subject to an obligation of confidentiality;
• Implementing and maintaining commercially reasonable administrative, physical, and technical safeguards designed to protect the security, confidentiality, and integrity of Personal Data;
• Informing and cooperating with FeedOtter in the event of a security breach; and
• Cooperating with FeedOtter with requests from data controllers, data subjects, or data protection authorities, as applicable.

Process to Engage New Sub-processors

If You have executed FeedOtter’ standard DPA, FeedOtter regularly updates the list of sub-processors that are utilized or which FeedOtter proposes to utilize to deliver its Services. Pursuant to the DPA, You may object in writing to the processing of Your Personal Data by a new sub-processor within ten (10) business days following the update. If You do not object during such time period, the new sub-processor(s) shall be deemed accepted. If You object to the use of a new sub-processor, FeedOtter may choose to:

• recommend changes to the Services or Your configuration of the Services to avoid Processing by the new sub-processor; or
• cease to provide You the particular aspect or feature of FeedOtter Services that would involve use of the sub-processor.

Termination rights, as applicable and agreed, are set forth exclusively in the DPA.

The following is a list of the names and locations of FeedOtter sub-processors.