Cerbos-InfraSubprocessors-05Nov2023.docx
Cerbos Infrastructure and Sub-processors
Updated: November 23, 2023
Scope
This documentation describes the infrastructure environment and sub-processors for the Cerbos’s provision of the Services.
Capitalized terms used in this documentation are defined in Cerbos’s Master Services Agreement, Data Processing Addendum and/or other written agreement with Customer. In the event of conflict, the Data Processing Addendum definition shall prevail.
All Services
The following legal entities are engaged in processing Personal Data for all Services.
| Entity Name | Entity Type | Location of Sub-processor | Storage location |
|---|---|---|---|
| Zenauth Ltd | Cerbos HQ | United Kingdom | N/A |
| Google Inc.(Google Cloud) | Third Party Hosting Provider | United States | European Economic Area |
| Auth0,Inc. | Customer support tool | United States | European Economic Area & United Kingdom |
| Salesforce,Inc.(Slack) | Customer support tool | United States | European Economic Area & United Kingdom |
| Google Inc.(Google Workspace) | Toolkit used for Professional Services and Support | United States | European Economic Area |
| Hotjar Limited | Usage analytics tool | Malta | European Economic Area |
| PostHog Inc. | Usage analytics tool | United States | European Economic Area |
| Crisp IM SAS | Customer support tool | France | European Economic Area |
| Hubspot,Inc. | Customer support tool | United States | European Economic Area |
Customer agrees and acknowledges that Cerbos is a remote-first company and engages its personnel as employees, via an employer of record and/or via other means of alternative contracting (individual companies or sole entrepreneurship) in various countries worldwide (collectively the “Remote Personnel”). Cerbos shall treat all Remote Personnel as its employees and employ the same effective control over their work regardless of their formal legal status. Cerbos considers the Remote Personnel as its personnel under its direct control and not as separate sub-processors. Cerbos does not publicly disclose the list of the Remote Personnel and their location to protect their privacy. Customer can request the list. If the Remote Personnel is deemed third-party sub-processors for the purpose of applicable privacy laws, Customer grants general consent for Cerbos to use Remote Personnel as sub-processors.
Cerbos customers may subscribe to notifications of new sub-processors by sending an email to legal@cerbos.dev.