Data Location & Subprocessor Guide  Khoros has offices in the USA, the EU, the UK, India and  Australia. These offices may have access to customer personal data for support and engineering purposes.   Khoros also uses subprocessors in its applications to help it perform certain Services. Suprocessors are third-party entities with whom Khoros contracts to perform these Services and who may process customers’ personal data. Khoros contractually requires its subprocessors to comply with security and data privacy standards that are at least as protective as those that Khoros commits to its customers. Specifically, as concerning European Union data privacy regulatory compliance, Khoros complies with the EC Standard Contractual Clauses and requires that those subprocessors that have access to Customer personal data also comply. For information on our subprocessors, please scroll down to the charts below or simply click on one of the following links to be redirected to the corresponding chart:     What has changed since our last version: we updated information on our hosting of Khoros Care logs with subprocessor Sumo Logic. MARKETING SUBPROCESSORS Subprocessor Purpose Data Hosting Location Customer Location AWS USA Cloud hosting USA Worldwide Fastly Content delivery network Worldwide (location list at: https://www.fastly.com/network-map) Worldwide Pendo In-app help, guidance, and announcements USA Worldwide SendGrid Email service provider used to send emails USA, UK, India, and Japan Worldwide Sumo Logic Log collection and storage USA Worldwide Twilio Provides programmable communication products and services, primarily in the form of APIs USA Worldwide Urban Airship Mobile push notifications which might contain PII USA, EU Worldwide Zencoder Video transcoding; Although it does not handle PII, it may have access to unreleased marketing assets USA, Australia, Mexico, Singapore, UK, Spain, France, Germany, and Sweden Worldwide   CARE SUBPROCESSORS  Subprocessor Purpose Data Hosting Location Customer Location AWS USA Cloud hosting USA USA and Canada Customers EMEA/APAC Customers solely for authentication data* AWS Ireland Cloud hosting Ireland EMEA Customers* AWS Australia Cloud hosting Australia APAC Customers* Pendo In-app help, guidance, and announcements USA Worldwide Sendgrid Email services provider used to send emails USA, UK, India, and Japan Worldwide Sumo Logic Log collection and storage USA USA, Canada, and EMEA Customers Sumo Logic Log collection and storage Australia APAC Customers Sunshine Conversations Extends conversational capabilities USA and EU Worldwide Twilio Provides programmable communication products and services, primarily in the form of APIs USA Worldwide OPTIONAL CARE SUBPROCESSORS Box File storage for Customers using the “File Preview Feature” USA Worldwide Cloud Elements API integration platform for CRM USA and Ireland Worldwide * = User profile and authentication data for the sole purpose of providing a unified log-in experience will be hosted in AWS USA for all Care customers.  All other customer data is hosted in region where customer is situated.  KHOROS BOT SUBPROCESSORS Subprocessor Purpose Data Hosting Location Customer Location Auth0 User authentication Germany Worldwide AWS EU West 1 Cloud hosting Amsterdam, Germany, and Luxembourg Worldwide AWS Ireland Cloud hosting Ireland Worldwide Cloudflare Web firewall and CDN Worldwide Worldwide Customer.io CRM USA Worldwide MongoDB Database management  Belgium Worldwide OPTIONAL KHOROS BOT SUBPROCESSORS Google Ads (and analytics) Advertising USA Worldwide Sendgrid Email provider USA Worldwide Sentry.io Error reporting USA Worldwide   COMMUNITY SUBPROCESSORS Subprocessor Purpose Data Hosting Location Customer Location AWS USA Cloud hosting USA USA, Canada, and APAC Customers AWS Ireland Cloud hosting Ireland EMEA Customers Akamai Technologies Content delivery network Worldwide (location list at: https://www.akamai.com/us/en/locations.jsp)  Worldwide Akismet Spam detection USA and Australia Worldwide Clarotest Consulting Lab S.R.L. Some access to customer data as part of outage mitigation Argentina Worldwide ETI Support, migration, and upgrades Bulgaria, Italy, and UK Worldwide Pendo In-app help, guidance, and announcements USA Worldwide Sendgrid Email services provider used to send emails USA, UK, India, and Japan Worldwide Sumo Logic Log collection and storage USA Worldwide Sunshine Conversations Extends conversational capabilities USA and EU Worldwide OPTIONAL COMMUNITY SUBPROCESSORS Brightcove Video playback and storage USA, Australia, Mexico, Singapore, UK, Spain, France, Germany, and Sweden Worldwide Box File storage for Customers using the “File Preview Feature” USA Worldwide   CX INSIGHTS SUBPROCESSORS Subprocessor Purpose Data Hosting Location Customer Location AWS USA Cloud hosting for conversational analytics  USA USA and Canada Customers AWS Ireland Cloud hosting for conversational analytics  Ireland EMEA Customers AWS Australia Cloud hosting for conversational analytics  Australia APAC Customers MongoDB USA Cloud hosting conversational metadata USA USA and Canada Customers MongoDB Ireland Cloud hosting conversational metadata Ireland EMEA Customers MongoDB Australia Cloud hosting conversational metadata Australia APAC Customers Okta User authentication and identity management USA Worldwide Pendo In-app help, guidance, and announcements USA Worldwide OPTIONAL CX INSIGHTS SUBPROCESSORS Curator Group Pty Ltd Social media data collection and aggregation Australia Worldwide Google Cloud  Language translation  USA Worldwide   BUSINESS OPERATIONAL SUBPROCESSORS Subprocessor Purpose Data Hosting Location Customer Location Domo Business intelligence and data visualization tool USA Worldwide Atlassian (Jira) Product support tool for Professional Services issue tracking and project management USA Worldwide Salesforce** Customer relationship management USA Worldwide Workato System integration USA Worldwide ** = Salesforce may be used in conjunction with other third-party applications or add-ons.

Khoros' steps to ensure GDPR Compliance

This article captures a complete inventory of personal data points used throughout Khoros products, for EU privacy compliance and other cases.