GDPR Subcontractors List

This document lists all subcontractors that Scorable uses to process personal data on behalf of our customers in accordance with GDPR requirements.

Last updated: December 22, 2025

Subcontractors

Amazon Web Services (AWS)

Service Provided: Cloud infrastructure and hosting services
Data Processing Activities: Storage and processing of customer data
Location: European Union (EU) regions
Safeguards: AWS Standard Contractual Clauses (SCCs), AWS GDPR Data Processing Addendum
Website: https://aws.amazon.com
Privacy Policy: https://aws.amazon.com/privacy/

Slack

Service Provided: Team communication and collaboration platform
Data Processing Activities: Internal team communications
Location: United States
Safeguards: Standard Contractual Clauses (SCCs), EU-U.S. Data Privacy Framework
Website: https://slack.com
Privacy Policy: https://slack.com/trust/privacy/privacy-policy

Stripe

Service Provided: Payment processing services
Data Processing Activities: Processing payment information and subscription management
Location: United States, with data centers in Europe
Safeguards: Standard Contractual Clauses (SCCs), EU-U.S. Data Privacy Framework
Website: https://stripe.com
Privacy Policy: https://stripe.com/privacy

Google Analytics

Service Provided: Web analytics and reporting
Data Processing Activities: Website usage analytics and user behavior tracking
Location: United States, with data centers worldwide
Safeguards: Google Cloud Data Processing Amendment, Standard Contractual Clauses (SCCs)
Website: https://analytics.google.com
Privacy Policy: https://policies.google.com/privacy

Google Cloud Platform

Service Provided: Cloud infrastructure and services
Data Processing Activities: Application hosting and data processing
Location: European Union (EU) regions
Safeguards: Google Cloud Data Processing Amendment, Standard Contractual Clauses (SCCs)
Website: https://cloud.google.com
Privacy Policy: https://cloud.google.com/privacy

Google Tag Manager

Service Provided: Tag management system
Data Processing Activities: Managing analytics and marketing tags
Location: United States, with data centers worldwide
Safeguards: Google Cloud Data Processing Amendment, Standard Contractual Clauses (SCCs)
Website: https://tagmanager.google.com
Privacy Policy: https://policies.google.com/privacy

PostHog

Service Provided: Product analytics platform
Data Processing Activities: Product usage analytics and feature tracking
Location: United States and European Union
Safeguards: Standard Contractual Clauses (SCCs), GDPR-compliant data processing
Website: https://posthog.com
Privacy Policy: https://posthog.com/privacy

Sentry

Service Provided: Application monitoring and error tracking
Data Processing Activities: Error logging and performance monitoring
Location: United States
Safeguards: Standard Contractual Clauses (SCCs), EU-U.S. Data Privacy Framework
Website: https://sentry.io
Privacy Policy: https://sentry.io/privacy/

Vanta

Service Provided: Security and compliance automation
Data Processing Activities: Security monitoring and compliance tracking
Location: United States
Safeguards: Standard Contractual Clauses (SCCs), SOC 2 Type II certified
Website: https://vanta.com
Privacy Policy: https://vanta.com/privacy

Grafana Cloud

Service Provided: Observability and monitoring platform
Data Processing Activities: Application and infrastructure monitoring
Location: European Union (EU) regions
Safeguards: Standard Contractual Clauses (SCCs), GDPR-compliant data processing
Website: https://grafana.com
Privacy Policy: https://grafana.com/legal/privacy-policy/

HubSpot

Service Provided: Customer relationship management (CRM) and marketing platform
Data Processing Activities: Customer data management and marketing communications
Location: United States
Safeguards: Standard Contractual Clauses (SCCs), EU-U.S. Data Privacy Framework
Website: https://hubspot.com
Privacy Policy: https://legal.hubspot.com/privacy-policy

Linear

Service Provided: Issue tracking and project management
Data Processing Activities: Project management and issue tracking data
Location: United States
Safeguards: Standard Contractual Clauses (SCCs), GDPR-compliant data processing
Website: https://linear.app
Privacy Policy: https://linear.app/privacy

This list will be updated as we add or remove subcontractors. Customers will be notified of any material changes to our list of subcontractors.