iHasco uses a number of sub-processors to carry out certain activities relating to the data it holds — all are subject to agreements with iHasco. These sub-processors process data on our behalf but do not have access to it. Below is a list of all sub-processors, how iHasco uses their services, and whether they are GDPR compliant.
Core application
Amazon Web Services
Cloud infrastructure provider — where the application code and database reside. We also use Amazon S3 to store daily, weekly, and monthly backups of the database.
Location: UK (London)
Compliance: https://aws.amazon.com/compliance/gdpr-center
Microsoft Corporation
Azure B2C identity and access management — we also use Microsoft user login credentials for our Atlas LMS. This is managed by our parent company, Citation Holdings, and data sharing between iHasco and Citation Holdings takes place to facilitate provision of LMS services.
Location: UK
Postmark
Provides an email processing service, which we use to deliver transactional emails from the application to clients and end users on a client's behalf. Retains an imprint of emails sent for 45 days following transmission, for the purposes of reporting on email bounces in our application.
Location: USA
Compliance: Subject to Standard Contractual Clauses (see https://postmarkapp.com/eu-privacy#gdpr)
Pusher
Provides real-time event broadcasting. This allows us to indicate when background jobs have completed in the LMS.
Location: UK (administrative), EU Ireland (data)
Compliance: Subject to Standard Contractual Clauses (see https://pusher.com/legal/data-protection)
Supporting services
Stripe
Payment processor for purchases made through our website and over the phone.
Location: UK (Ireland)
Compliance: Subject to Standard Contractual Clauses (see https://support.stripe.com/questions/stripe-and-european-data-transfers)
HelpScout
Provides in-app training feedback for learners.
Location: USA
Compliance: Subject to Standard Contractual Clauses (see https://www.helpscout.com/company/legal/gdpr)
Salesforce Inc.
Customer relationship management and messaging CRM infrastructure.
Location: UK & USA
Compliance: Categories | Salesforce Compliance
