Sub-processors
Isara Systems Ltd uses the sub-processors below to provide the Isara Services. Each is bound by a written contract that imposes the same level of data protection as our Data Processing Agreement (DPA). This page is Annex 1 to the DPA.
Client data is stored and processed in the region assigned to the client's account: the United States for clients based in the United States, and the UK or EEA for clients based in the UK or EEA.
| Sub-processor | Service | Personal data | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services, Inc. (USA) | Cloud infrastructure, hosting, storage, backup and AI services | Personal Data submitted by the Controller through the Services | US clients: United States. UK and EEA clients: UK or EEA. | UK and EEA clients' data stays in the UK or EEA. Any access from outside is covered by the EU Standard Contractual Clauses and the UK Addendum. |
| Google LLC (USA) | Cloud and AI services | Personal Data submitted by the Controller through the Services | EU. UK and EEA clients only. | EU Standard Contractual Clauses and the UK Addendum, with supplementary measures. |
Changes to this list
We give clients at least 30 days' notice before adding or replacing a sub-processor, as set out in clause 9.1 of the DPA. Clients may object on reasonable data protection grounds during that period.
For questions about our sub-processors, contact our Data Protection Officer at dpo@isara.ai.