Sub-Processors List

Grata uses selected sub-processors to meet the service levels detailed in our General Terms & Conditions and Data Processing Addendum. A sub-processor is a third party data processor that has or will potentially have access to or process customer data that may contain personal data. Unless transferred on the basis of an adequacy decision issued by the applicable supervisory authority, all transfers are governed by approved Standard Contractual Clauses.

Entity Name	Purpose	Jurisdiction

Amazon Web Service, Inc.	Cloud-based Data Center	US East - Northern Virginia (Americas Customers) EU Central - Frankfurt, Germany (EMEA and APAC Customers) Backup Servers US East - Northern Virginia (Americas Customers) EU Central - Frankfurt, Germany (EMEA and APAC Customers)
MongoDB, Inc.	Managed Database services For storing user created data	AWS Cloud US East - Northern Virginia EU Central - Frankfurt, Germany
Twilio, Inc	SMS For MFA	US East - Ashburn, Virginia
Auth0, Inc	Customer Registration, administration, identity and authentication	US East
Datasite Costa Rica SRL	Customer Support	San José, Costa Rica

Subscribe to updates

How to subscribe to updates:

You must subscribe to receive email notification of updates to Sub-Processors by submitting (1) the email address for such notifications and (2) the full name of the legal entity on whose behalf you are subscribing. By submitting this information, you represent that you have all necessary rights to provide this information to Grata.

How can current Grata customers object to a new Sub-Processor?

If you are a current Grata customer, with a fully executed data processing agreement (“DPA”) in place with Grata, you may notify us of an objection to Grata’s use of a new Sub-Processor used to process your client data by sending such objection to privacy@grata.com within twenty-four (24) days after Grata notice of such new Sub-Processor, or such other period of time as set forth in your DPA. Objections shall be handled as described in your DPA.