These documents concern agreements with Sellforte Solutions Oy. The contracting entity in your Order Form determines the applicable terms. Terms for the other Sellforte contracting entity.
The Customer authorizes the subprocessors below when used to provide its Services. This authorization covers Customer Personal Data processed on the Customer’s behalf.
Processing locations
AWS, Google Cloud, Fivetran, and Descope: Sellforte configures the main processing regions as agreed with the Customer. The agreed configuration may involve processing outside the EU/EEA. Any processing outside the agreed main regions remains subject to the supplier’s applicable location commitments, including any permitted exceptions for support, security, or legal requirements, and this DPA’s transfer safeguards.
Microsoft 365 and HubSpot: Sellforte uses EU hosting by default. Limited processing outside the EU/EEA may occur as described in the relevant supplier’s data-processing terms and disclosures.
WorkOS: WorkOS is used for Online Service authentication in certain deployments. Where used, related account and access data are processed in the United States.
Descope: Descope is used for Online Service authentication in certain deployments. Sellforte configures the main processing regions as agreed with the Customer.
Sellforte Affiliates: The listed Affiliates may assist with engineering, support, and service delivery from their stated locations. Their involvement varies by Customer and may entail international transfers. Sellforte remains responsible for them and ensures confidentiality, processing terms, and applicable transfer safeguards before access.
All processing remains subject to this DPA. International transfers and legally required disclosures follow Section 13 (International transfers) and Annex D. Additions or replacements follow Section 7.2 (List and changes). Changes to the listed suppliers’ own downstream subprocessors are published in the linked supplier registers, which the Customer may subscribe to; Sellforte will notify the Customer directly of a downstream change that adds a new processing country or materially affects the Customer’s processing, and the objection rights in Section 7.2 (List and changes) apply to such changes.
Entity | Function | Location and further information |
Amazon Web Services EMEA SARL38 Avenue John F. Kennedy, L-1855 Luxembourg, Luxembourg Amazon Web Services, Inc.410 Terry Avenue North, Seattle, WA 98109-5210, United States | Hosting, backups, and Bedrock inference | Agreed main processing regions. AWS DPA; AWS subprocessors. |
Google Cloud EMEA Limited70 Sir John Rogerson’s Quay, Dublin 2, Ireland | Alternative hosting and infrastructure | Agreed main processing regions. Google Cloud DPA; Google Cloud subprocessors. |
Fivetran Inc.1221 Broadway, Floor 20, Oakland, CA 94612, United States | Data connectors and ingestion | Agreed main processing regions. Fivetran DPA; Fivetran residency and subprocessors. |
Microsoft Ireland Operations Limited70 Sir John Rogerson’s Quay, Dublin D02 R296, Ireland | Communications, collaboration, and project management containing Customer Personal Data | EU hosting by default. Microsoft DPA; Microsoft EU Data Boundary and transfer details. |
HubSpot Ireland LimitedHubSpot House, One Sir John Rogerson’s Quay, Dublin 2, Ireland | Customer communications, support, and ticket management containing Customer Personal Data | EU hosting by default. HubSpot DPA; HubSpot hosting and processing details. |
WorkOS, Inc. 548 Market St, PMB 86125, San Francisco, CA 94104, United States | Online Service authentication in certain deployments, including related account and access data | United States. Authentication data is transferred to and processed in the United States, subject to Section 13 (International transfers) and Annex D. |
Descope Technologies UK (2025) Ltd. 20 Wenlock Road, London, England, N1 7GU, United Kingdom Descope, Inc. 20660 Stevens Creek Boulevard, #245, Cupertino, CA 95014, United States | Online Service authentication in certain deployments, including related account and access data | Agreed main processing regions. Descope DPA: https://www.descope.com/customer-data-processing-amendment ; Descope subprocessors: https://www.descope.com/sub-processors ; Descope data residency: https://docs.descope.com/management/project-settings/multi-regional |
Sellforte, Inc.2201 Spinks Road, Suite 252, Flower Mound, TX 75022, United States | Engineering, support, and service delivery | United States. Access under intragroup agreement and applicable transfer safeguards. |
Sellforte Solutions GmbHNobistor 16, 22767 Hamburg, Germany | Engineering, support, and service delivery | Germany. Access under intragroup agreement and applicable transfer safeguards. |
Sellforte Solutions UK Ltd71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom | Engineering, support, and service delivery | United Kingdom. Access under intragroup agreement and applicable transfer safeguards. |
