Sub-Processors used at Governance360

To support delivery of our Services, Board Secure Limited (hereafter known by our trading name, “Governance360”) may engage and use data processors with access to certain Service data (each, a “Subprocessor”). This page provides important information about the identity, location and role of each Subprocessor.

What is a subprocessor

A Subprocessor is a third party data processor engaged by Governance360 who has or potentially will have access to or process Service data (which may contain Personal Data).

Governance360 engages different types of Subprocessors to perform various functions as explained in the tables below.

 

Process for new subprocessors

As our business grows and evolves, the Subprocessors we engage may also change. We will provide users of the Service with notice of any new Subprocessors to the extent required under the Agreement by posting such updates here.

Governance360 will provide notice via this policy of updates to the list of Subprocessors that are utilised or which Governance360 proposes to utilise to deliver its Service. Governance360 undertakes to keep this list updated regularly to enable users of the Service to stay informed of the scope of subprocessing associated with the Service.

Please check back frequently for updates.

Contractual Safeguards

Governance360 requires its Subprocessors to satisfy equivalent obligations as those required from Governance360 (as a Data Processor) as set forth in either Governance360’s, or the corresponding Subprocessor’s equivalent, Data Processing Addendum (“DPA”), incorporating Standard Contractual Clauses (“SCC”) where appropriate, including but not limited to the requirements to:

  • process Personal Data in accordance with Governance360’s instructions;
  • in connection with their subprocessing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws;
  • implement and maintain appropriate technical and organisational measures (including measures consistent with those to which Governance360 is contractually committed to adhere insofar as they are equally relevant to the Subprocessor’s processing of Personal Data on Governance360’s behalf);
  • promptly inform Governance360 about any actual or potential security breach; and
  • cooperate with Governance360 in order to deal with requests from data controllers, data subjects or data protection authorities, as applicable.

This policy does not give users of the Service any additional rights or remedies and should not be construed as a binding agreement. The information here is provided for transparency purposes to illustrate Governance360’s engagement process for Subprocessors as well as to provide the actual list of third party Subprocessors used by Governance360 (as of the date of this policy) which Governance360 may use in the delivery and support of its Service.

Sub-Processors used by Board Secure Limited (trading as Governance360)

As at February 2021 – updates will be posted to this page when additions or deletions are made.

Infrastructure Providers

The following is a list of the key infrastructure providers that we use to host and store our applications and your data.

    Company Name

    Services Provided
    Country of origin
    Amazon Web Services Inc (AWS)

    Cloud services provider for Python Anywhere services (host of ActionPlan and Academy products)

    Ireland

    Cloudflare Inc
    Cloud Delivery Network operator used to accelerate the delivery of our pages to you
    United States of America (USA)
    Google Inc
    Cloud services (hosting of BoardSecure portal)
    United States of America (USA)
    Siteground Hosting Limited
    Cloud hosting services for marketing website for Governance360
    United Kingdom

    Payments Providers

    We do not store payment card information or details of your bank account access details at Governance360. Payment processing and account access information is handled directly by the following third parties according to their respective Privacy Policies and Terms of Service which are found below.

      Company Name

      Services Provided
      Country of origin
      Stripe

      Outsourced payment services

      United States of America (USA), Europe

      GoCardless
      Outsourced payment services

      Europe

      Other Sub-Processors

      We use a number of third parties for other services provided by Governance360 and to manage our business.  This is done according to their respective Privacy Policies and Terms of Service as shown below.

        Company Name

        Services Provided
        Country of origin

        FreeAgent

        Accounting and payroll services

        United Kingdom

        Google Inc

        Google Analytics and Search Console for website optimisation and metrics

        United States of America (USA)

        Hubspot


        Customer management services

        United States of America (USA), Europe

        Typeform

        Online surveys and assessments
        United States of America (USA), Europe
        Vimeo

        Hosting video content

        United States of America (USA)

        WooCommerce
        Online ecommerce facilities
        Ireland