DATA LOCATION & SUBPROCESSOR GUIDE Khoros uses subprocessors in its applications to help it perform certain services. Suprocessors are third-party entities with whom Khoros contracts to perform these services and who may process customers’ personal data. Khoros contractually requires its subprocessors to comply with security and data privacy standards that are at least as protective as those the Khoros commits to its customers.  Specifically, as concerning European Union data privacy regulatory compliance, Khoros complies with the EC Standard Contractual Clauses and requires that those subprocessors that have access to Customer personal data also comply. What has changed since our last version: We added Flow.ai, Urban Airship, Firebase and AWS Australia; and we changed the format of this Guide.   INTEGRATED SUBPROCESSORS    Subprocessor Purpose  Location Khoros Application Marketing Care Community JX AWS USA Cloud hosting USA US/Canada/APAC/EMEA Customers US/Canada/ APAC* Customers US/Canada/ APAC Customers AWS Ireland Cloud hosting  Ireland   EMEA Customers EMEA Customers   AWS Australia  Cloud hosting Australia    APAC* Customers      Sumo Logic Log collection and storage USA X X X   Akismet Spam detection USA, Australia     X Akamai Technologies Content delivery network Worldwide (location list at: https://www.akamai.com/us/en /locations.jsp )     X X Sunshine Conversations Extends conversational capabilities USA, EU   X X   Fastly Content delivery network Worldwide (location list at: https://www.fastly.com/network-map) X       Pendo In-app help, guidance, and announcements USA X X X   Squelch Federated searching and indexing USA X X X   Hyland Videoplayback and storage USA, Ireland       X SendGrid Email service provider used to send emails USA, UK, India, and Tokyo X X X X Twillo Provides programmable communication products and services, primarily in the form of APIs USA X X     Flow.ai Agent assistance (e.g. suggested responses and intent detection)  The Netherlands   X     Urban Airship Mobile push notifications which might contain some PII USA, EU X       Firebase Mobile push notifications which might contain some PII Worldwide   X     Zencoder Video transcoding; Although it does not handle PII, it may have access to unreleased marketing assets USA, Australia, Mexico, Singapore, UK, Spain, France, Germany, Sweden X       ETI Support, Migration, Upgrades Bulgaria, Italy, and UK   X X   Persistent Development services India   X X   Clarotest Consulting Lab S.R.L. Some access to customer data as part of outage mitigation Argentina       X OPTIONAL SUBPROCESSORS    Subprocessor Purpose  Location Khoros Application Marketing Care Community JX Brightcove Videoplayback and storage USA, Australia, Mexico, Singapore, UK, Spain, France, Germany, Sweden     X   Box File storage for customers using the “File Preview Feature.” USA   X X   Cloud Elements API integration platform for CRM  USA, Ireland   X     BI Worldwide Gamification functionality USA       X * =  All APAC Care customers will be hosted in AWS Australia by 2021.   ... View more