Snapforms' Data Sub-Processors

Last modified: November 17, 2024

Effective: November 17, 2024

To provide our services effectively, Snapforms works with trusted service providers and affiliates – acting as data sub-processors – who assist in processing data as detailed in our Cloud Services Agreement. Snapforms undertakes due diligence and vendor security assessments on all sub-processors it engages to ensure appropriate security measures are in place and the vendors adhere to all applicable data laws.

For Customer Data (data about our direct customers), Snapforms acts as the data controller when processing customer data and engaging any data sub-processors. For Respondent Data (form submissions), Snapforms acts as a data processor under the instructions of our Customers, who are the data controllers for this information. When processing Respondent Data, our Customers (as data controllers) are responsible for ensuring they have the appropriate legal basis for processing. Snapforms and its sub-processors will only process this data according to the Customer’s instructions.

Snapforms works under the data protection principles of purpose limitation, data minimisation, and principle of least privilege. Snapforms has no access to Respondent Data (forms submissions) at any time unless expressly granted by ‘You’ the Customer for support purposes. If granted, this data is never communicated via any internal Snapforms platforms, apps, or communications channels at any time nor utilised for any purpose outside of the grounds for which access was granted.

Updates and Notifications

We will notify our Customers of any changes to our sub-processor list according to our notification procedures outlined in our Privacy Policy. Changes to customer-enabled integrations may occur without prior notice as these services are independently managed by their respective providers.

Objecting to a Sub-processor

You may object to a sub-processor by emailing your objection to contact@snapforms.com.au with the subject line “Sub-processor Objection,” along with your name, your company’s name, the name of the sub-processor, and grounds for objection. Please note, while all attempts will be made to address this objection, some Snapforms’ services may not be able to be provided without the support of certain sub-processors.

Additional Information

For questions about our Sub-processors or customer-enabled integrations, please contact:

Privacy inquiries: contact@snapforms.com.au

Sub-Processors for Form Response Data (Customer as Controller)

Snapforms does not access respondent data unless explicitly authorized by the customer for support purposes. When access is granted, it is strictly for the purpose of providing immediate service support. Snapforms will never share or communicate respondent information through any internal platforms, applications, or communication channels at any time.

Sub-Processor	Purpose	Data	Location
AWS	Cloud Service Provider	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Sensitive Information Political opinions, attitudes, or other preferences Metadata and Interaction Details Uploaded Content if requested by the customer through the form Consent Information as relevant to the form Other sensitive or personal data expressly requested by the form	Australia
SMS Edgility	SMS Notification Services	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Sensitive Information Political opinions, attitudes, or other preferences Metadata and Interaction Details Uploaded Content if requested by the customer through the form Consent Information as relevant to the form Other sensitive or personal data expressly requested by the form	Australia (AWS)
Atlassian	Customer Support Services, Knowledge Base, Project Management, Incident Management	(Data minimisation strongly adhered to, essential data only shared to support incident management) Contact Information Data Related to Service Use Technical Information Integration Data Metadata and Interaction Details	United States, Germany, Ireland, Singapore, and Australia

Sub-Processor

Purpose

Data

Location

AWS

Cloud Service Provider

Personally Identifiable Information
Contact Information
Professional/Entity Information
Data Related to Service Use
Technical Information
Marketing Preferences
Sensitive Information
Political opinions, attitudes, or other preferences
Metadata and Interaction Details
Uploaded Content if requested by the customer through the form
Consent Information as relevant to the form
Other sensitive or personal data expressly requested by the form

Australia

SMS Edgility

SMS Notification Services

Personally Identifiable Information
Contact Information
Professional/Entity Information
Data Related to Service Use
Technical Information
Marketing Preferences
Sensitive Information
Political opinions, attitudes, or other preferences
Metadata and Interaction Details
Uploaded Content if requested by the customer through the form
Consent Information as relevant to the form
Other sensitive or personal data expressly requested by the form

Australia (AWS)

Atlassian

Customer Support Services, Knowledge Base, Project Management, Incident Management

(Data minimisation strongly adhered to, essential data only shared to support incident management)

Contact Information
Data Related to Service Use
Technical Information
Integration Data
Metadata and Interaction Details

United States, Germany, Ireland, Singapore, and Australia

Sub-Processors for Customer Data (Snapforms as Controller)

Customer data refers exclusively to information collected from individuals or organisations that directly engage with Snapforms as account holders or users of our services. This does not include form responses or data submitted by the end-users of our customers’ forms. Customer data is collected solely for purposes such as account creation, management, service support, and maintenance.

Sub-Processor	Purpose	Data	Location
Atlassian	Customer Support Services, Knowledge Base, Project Management	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Integration Data Metadata and Interaction Details	United States, Germany, Ireland, Singapore, and Australia
Stripe	Payment Services	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Integration Data Metadata and Interaction Details Billing information	United States
Xero	Payment and Accounting Services	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Integration Data Metadata and Interaction Details Billing information	United States (via AWS)
Salesforce	Customer Support Services	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Integration Data Metadata and Interaction Details Billing information	Australia
Gather	Internal Operational Communication Service	Personally Identifiable Information Professional/Entity Information Data Related to Service Use	United States, Brazil, Japan, Germany, Singapore, and India
Slack	Internal Operational Communication Service	Personally Identifiable Information Professional/Entity Information Data Related to Service Use	United States (via AWS)
WPHosting	Cloud Service Provider	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Integration Data Metadata and Interaction Details Billing information	WPHosting
Qliq	Business Intelligence	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Integration Data Metadata and Interaction Details Billing information
Datadog	Performance Monitoring and Analytics Platform	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Integration Data Metadata and Interaction Details Billing information	United States, Germany, Japan
Tawk	Customer Service Support	Personally Identifiable Information Professional/Entity Information Data Related to Service Use	United States
Google LLC	Internal Administration and Analytics	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Integration Data Metadata and Interaction Details Billing information	United States
Hotjar	Analytics Platform	Personally Identifiable Information Contact Information Professional/Entity Information Data Related to Service Use Technical Information Marketing Preferences Integration Data Metadata and Interaction Details Billing information	Ireland

Optional Integration Partners – Account Services (Customer as Controller)

While Snapforms provides the technical capabilities to integrate with the below service providers to enable an enhanced services offering, these third-parties are engaged directly by ‘You’ as the Customer and under the definition of yourself as Data Controller. Any data processing agreement with the below service providers is under your direction. You can enable or disable these integrations within your account at any time. Snapforms additionally has no knowledge of the data ‘You’ the Customer may choose to authorise the below service providers to process as part of your integration with them nor the secondary sub-processors that may be engaged as part of engaging with these integrations.

Organisation	Purpose	Location
Coreplus	Practice Management Software	Australia
Cliniko	Practice Management Software	Australia
Nookal	Practice Management Software	Australia – for Client Data in AU Accounts. Ireland – for Client Data in EU/UK Accounts. United States – for Client Data in US/CA Accounts
Microsoft (Power Automate)	Task Automation	United States
Make (formerly Integromat)	Create, Build, and Automate Workflows	United States, European Union
Salesforce	Customer Management Tool	Netherlands, Sweden, Germany, United Kingdom, France, United States, Japan
Mailchimp	Marketing, Automation, and Email	United States
Dropbox	File Storage	United States, United Kingdom, Australia, European Union, Japan
Google Sheets	Spreadsheet Application	United States, European Union, United Kingdom, South America, Taiwan, Japan, Singapore