Eyvo’s Sub-processors

Eyvo’s Sub-processors

Article 28(2) and (4) of the GDPR directly deal with the situation where a processor engages “another processor,” which can be called a “sub-processor” or a “level 2 processor”.

Under the GDPR, the controller must give its prior written authorization when its processor intends to entrust all or part of the tasks assigned to it to a sub-processor.

Even after having obtained the controller’s formal authorization, the processor remains fully liable to the controller for the performance of the sub-processor’s obligations. In case of cascading subcontracting, these obligations will be passed down to the other sub-processors (level 3 processor and so on).

Below is a list of Eyvo’s sub-processors as defined by the GDPR.

Sub-Processor	Activity	Personal Data	Location
Amazon Web Services	Eyvo.com website host	Name,email	USA
LiveChat	External communication	Name,email	USA
Acuity Scheduling	Collaboration	Name,email	USA
Google	Analytics, Marketing	N/A	USA
ClickUp	Project Management	Name,email, phone	USA
LinkedIn	Marketing	Name,email, phone	USA
UpWork	Hiring	Name,email	USA
Replyfi	Outreach	Name,email	USA
Microsoft	Infrastructure provision and Software development	N/A	USA, Europe
Adobe	Software Development	N/A	USA
Xero	Financial Analysis	Name, email	USA