AssetAccountant Pty Ltd uses a small number of third party providers to deliver its platform and run its business. Where those providers process personal data on our behalf, they act as sub-processors and are bound by written data protection terms no less protective than our own commitments.
This page lists our current sub-processors. It is referred to in our Privacy Policy and in the Data Processing Agreement we offer to customers.
| Provider | Service | Location of processing | Transfer safeguard |
|---|---|---|---|
| Microsoft Azure | Cloud hosting and infrastructure for the AssetAccountant platform | Australia (Australia East region) | Microsoft Data Protection Addendum, incorporating Standard Contractual Clauses and the UK International Data Transfer Addendum |
| Cloudways (DigitalOcean) | Hosting for our website, including submissions made through our web forms | Australia (Sydney) | Data Processing Agreement incorporating Standard Contractual Clauses and the UK Addendum |
| Provider | Service | Location of processing | Transfer safeguard |
|---|---|---|---|
| Stripe | Subscription billing and payment processing | United States and Ireland | Stripe Data Processing Agreement, incorporating Standard Contractual Clauses and the UK Addendum |
| Xero | Accounting and invoicing; holds customer billing contact details | United States | Xero Data Processing Agreement, incorporating Standard Contractual Clauses and the UK Addendum |
| Pipedrive (Pipedrive Inc) | Customer relationship management; prospect and customer contact records | United States | Pipedrive Data Processing Addendum, incorporating Standard Contractual Clauses and the UK Addendum |
| Freshdesk (Freshworks) | Customer support ticketing and correspondence | Australia | Freshworks Data Processing Addendum, incorporating Standard Contractual Clauses and the UK Addendum |
| Google Workspace | Business email, calendar and document storage, including transactional and marketing email delivery | United States and other Google data centre locations | Google Cloud Data Processing Amendment, incorporating Standard Contractual Clauses and the UK Addendum |
| Google Analytics and Google Tag Manager | Website analytics and tag management | United States and other Google data centre locations | Google Ads Data Processing Terms, incorporating Standard Contractual Clauses and the UK Addendum. Non-essential cookies are set only with consent for visitors in the UK and EEA |
| Provider | Service | Location of processing | Transfer safeguard |
|---|---|---|---|
| DataRep (Data Protection Representative Limited) | Our appointed representative under Article 27 of the UK and EU GDPR and the Swiss Federal Act on Data Protection. Receives and forwards requests from individuals and authorities | Ireland, with contact locations across the EU, EEA, UK and Switzerland | Processing takes place within the EEA and UK. Onward transfer to us in Australia is covered by our Standard Contractual Clauses and the UK Addendum |
We give customers at least 30 days' notice before adding or replacing a sub-processor. If you would like to be notified of changes, or if you have questions about any provider listed here, contact us at privacy@asset.accountant.
