Causeway
Sub-Processors Summary and Scope
Sub-processors Information List
Overview
In accordance with the Causeway Data Protection Schedule which forms part of our agreements with all customers, this page lists the Sub-processors used by Causeway for processing Relevant Personal Data (as defined in the Causeway Data Protection Schedule).
Causeway Technologies engages carefully selected third-party service providers (“Sub-Processors”) to support the delivery, maintenance, and security of its cloud-based applications and related services. These Sub-Processors may process personal data strictly as necessary to provide their contracted services to Causeway and its customers.
Causeway remains responsible for the actions and performance of all Sub-Processors and ensures that appropriate contractual, technical, and organisational safeguards are in place to protect personal data.
Data Protection and Contractual Safeguards
All Sub-Processors are bound by formal contracts and Data Processing Agreements (DPAs) that require compliance with the UK GDPR, EU GDPR, and other applicable data protection laws.
Scope of the Sub-Processor Register
The Sub-Processor Register covers all Causeway applications and services where Causeway acts as a Data Processor on behalf of its customers. It includes:
- Hosting and infrastructure providers (e.g. cloud or data centre services);
- Application-layer and support service providers (e.g. email delivery, analytics, monitoring); and
- Professional and technical support partners engaged for maintenance, customer service.
| Sub Processor Name | Sub-Processing Activity | Data Type / Subjects | Transfer Mechanism | Processing Location(s) |
| Amazon Web Services (AWS) | Cloud hosting services | Customer and user data | Standard Contract Clause’s (SCCs) / Data Processing Agreement (DPA) / Adequacy (UK) | UK, Ireland, Germany, US - One.Network US Instance only |
| Microsoft Azure | Cloud hosting services | Customer and user data | Standard Contract Clause’s (SCCs) / Data Processing Agreement (DPA) / Adequacy (UK/EU) | UK, Ireland |
| Google Cloud Platform (GCP) | Cloud hosting services | Customer and user data | Adequacy (UK) | UK |
| Redcentric Solutions Ltd | Data centre hosting and network infrastructure services | Customer and user data | Adequacy (UK) | UK |
| Node4 Limited (formerly Secura Hosting Limited) |
Cloud hosting services | Customer and user data | Adequacy (UK) | UK |
| HubSpot | CRM and marketing automation services | Customer contact data | Standard Contract Clause’s (SCCs) / Data Processing Agreement (DPA) / Adequacy (UK/EU) | EU |
| Logz.io | Log monitoring and analysis | System telemetry and logs | Standard Contract Clause’s (SCCs) / Data Processing Agreement (DPA) / Adequacy (UK/EU) | EU |
| Twilio | Email and communication API services | Communication metadata | Standard Contract Clause’s (SCCs) / Data Processing Agreement (DPA) / Adequacy (UK/EU) | EU |
| Datadog | Log Managment, Application performance monitoring | System telemetry and logs | Standard Contract Clause’s (SCCs) / Data Processing Agreement (DPA) / Adequacy (UK/EU) | EU, US |
| Workato | Workflow automation and data integration | Customer and user data; integration logs | Standard Contract Clause’s (SCCs) / Data Processing Agreement (DPA) / Adequacy (UK/EU) | EU |
| Mailgun | Email and communication API services | Communication metadata | Standard Contract Clause’s (SCCs) / Data Processing Agreement (DPA) / Adequacy (UK/EU) | EU |