Annex C Authorized subprocessors
Terms and Notices — Sellforte Solutions Oy — 2026-09
EU/rest of the world (excluding the US). The contracting entity in the Order Form determines the applicable terms. For US customers, see Sellforte, Inc. terms.
Annex C Authorized subprocessors
Version 2026-09-22
The Customer authorizes the subprocessors below when used to provide its Services. This authorization covers Customer Personal Data processed on the Customer’s behalf.
Processing locations
- AWS, Google Cloud, and Fivetran: Sellforte configures the main processing regions as agreed with the Customer. The agreed configuration may involve processing outside the EU/EEA. Any processing outside the agreed main regions remains subject to the supplier’s applicable location commitments, including any permitted exceptions for support, security, or legal requirements, and this DPA’s transfer safeguards.
- Microsoft 365 and HubSpot: Sellforte uses EU hosting by default. Limited processing outside the EU/EEA may occur as described in the relevant supplier’s data-processing terms and disclosures.
- WorkOS: WorkOS is used for Online Service authentication in certain deployments. Where used, related account and access data are processed in the United States.
- Sellforte Affiliates: The listed Affiliates may assist with engineering, support, and service delivery from their stated locations. Their involvement varies by Customer and may entail international transfers.
All processing remains subject to this DPA. International transfers and legally required disclosures follow Section 13 (International transfers) and Annex D. Additions or replacements follow Section 7.2 (List and changes).
|
Entity |
Function |
Location and further information |
|---|---|---|
|
Amazon Web Services EMEA SARL Amazon Web Services, Inc. |
Hosting, backups, and Bedrock inference |
Agreed main processing regions. AWS DPA; AWS subprocessors. |
|
Google Cloud EMEA Limited |
Alternative hosting and infrastructure |
Agreed main processing regions. Google Cloud DPA; Google Cloud subprocessors. |
|
Fivetran Inc. |
Data connectors and ingestion |
Agreed main processing regions. Fivetran DPA; Fivetran residency and subprocessors. |
|
Microsoft Ireland Operations Limited |
Communications, collaboration, and project management containing Customer Personal Data |
EU hosting by default. Microsoft DPA; Microsoft EU Data Boundary and transfer details. |
|
HubSpot Ireland Limited |
Customer communications, support, and ticket management containing Customer Personal Data |
EU hosting by default. HubSpot DPA; HubSpot hosting and processing details. |
|
WorkOS, Inc. |
Online Service authentication in certain deployments, including related account and access data |
United States. Authentication data is transferred to and processed in the United States, subject to Section 13 and Annex D. WorkOS DPA; WorkOS subprocessors. |
|
Sellforte, Inc. |
Engineering, support, and service delivery |
United States. |
|
Sellforte Solutions GmbH |
Engineering, support, and service delivery |
Germany. |
|
Sellforte Solutions UK Ltd |
Engineering, support, and service delivery |
United Kingdom. |