This page lists the third parties involved in the processing of Customer Data when using the Servitly DPS.
It distinguishes between:
Sub-processors engaged by Servitly: Third parties that Servitly itself engages to deliver the DPS and that process Customer Data on Servitly's behalf.
Third-party services enabled by the Customer: External services that the Customer chooses to connect to the DPS through plugins, using its own accounts and credentials.
Services contacted by the end user's browser: External resources loaded directly by the browser or mobile app of DPS users, depending on the Customer's configuration.
Only the parties in Section 1 are sub-processors of Servitly within the meaning of Article 28 of the GDPR.
Sub-processors engaged by Servitly
Sub-processor | Service | Purpose | Data processed | Location | Transfer safeguards |
|---|---|---|---|---|---|
Amazon Web Services EMEA SARL | Cloud infrastructure (compute, storage, databases, DNS, SNS) | Hosting and operation of the DPS – EU region | All Customer Data. | Ireland | Processing within the EU |
Amazon Web Services Hong Kong | Cloud infrastructure (compute, storage, databases) | Hosting and operation of the APAC region. | All Customer Data of the only customers hosted in the APAC region. | Hong Kong SAR | Standard Contractual Clauses |
Microsoft Ireland Operations Ltd | Microsoft Azure cloud infrastructure | Hosting and operation of the DPS – EU region; Development and Staging environments. | All Customer Data. | Germany (Germany West Central) | Processing within the EU |
MongoDB Atlas | Managed MongoDB | Storage of entity objects. | Any Customer Data involved in the processed entities | Azure Ireland (northeurope) | Processing within the EU |
Zendesk | Ticketing System help.servitly.com | Management of support requests opened by the Customer | Name, email address, content of support requests. | Ireland | Processing within the EU |
The legal addresses of the cloud providers are listed in Cloud Providers.
Information on the applicable jurisdictions and on the safeguards against international governmental access is available on the Data Act Transparency page.
Third-party services enabled by the Customer
The DPS includes plugins that allow the Customer to integrate external services.
These plugins are disabled by default and are activated and configured by the Console user (Integrations / Plugins), using the Customer's own accounts, credentials and API keys.
When a plugin is enabled:
The provider of the integrated service acts based on the contract between the Customer and that provider, and is not a sub-processor of Servitly.
Servitly transmits Customer Data to the service only to the extent required by the plugin configuration, which constitutes the Customer's documented instruction;
The Customer is responsible for entering into the appropriate agreements with the provider (including, where required, a data processing agreement and transfer safeguards) and for informing data subjects.
Plugin | Provider | Data typically transmitted |
|---|---|---|
Google (Firebase Cloud Messaging) | Device token, notification content | |
Apple (Apple Push Notification service) | Device token, notification content | |
Amazon Web Services (Amazon SNS), Customer's AWS account | Phone number, message content | |
Infobip | Phone number, email address, message content, voice call data | |
Stripe | Billing details, order and subscription data (payment card data is collected directly by Stripe) | |
Microsoft (Microsoft Entra ID) | User identifiers and authentication data | |
Identity provider chosen by the Customer | User identifiers and authentication data | |
Ping Identity | User identifiers and authentication data | |
Microsoft | Customers, locations, products, tickets, work orders | |
Salesforce | Customers, locations, products, tickets, work orders | |
ServiceMax | Customers, locations, products, tickets, work orders | |
System chosen by the Customer | Partner and product master data | |
InfluxData or Customer's own instance | Metric Data | |
Snowflake | Metric Data and Application Data | |
OpenWeather | GPS coordinates of locations | |
Amazon Web Services, Customer's AWS account | Product identifiers, Metric Data, commands | |
Microsoft, Customer's Azure account | Product identifiers, Metric Data, commands | |
Respective IoT platform provider | Product identifiers, Metric Data, commands | |
Vodafone | SIM identifiers, connectivity status | |
Amazon | Product identifiers, commands, status | |
Product identifiers, commands, status |
Services contacted by the end user's browser
Some DPS components load resources directly from external services when a page is displayed.
In these cases, the external service receives technical data from the user's browser or app (such as IP address and user agent), but no Customer Data is sent by the DPS Backend.
Component | Service | Notes |
|---|---|---|
OpenStreetMap tile servers (default) or the provider configured by the Customer (Map Layer URL) | Map tiles loaded by the browser | |
Calendly | Only if used in the Customer's templates | |
Wistia | Only if used in the Customer's templates | |
Only if configured by the Customer | ||
Only if configured by the Customer | ||
Chart-based widgets (Time Series Chart, Bar Chart, Benchmark, Status Diagram, Metric State Diagram, Daily Summary Grid, XY Chart, Scatter Chart, Heat Map, Pie Chart) | amCharts | Only if used in the Customer's templates |