Version: 6.0 · Effective Date: June 15, 2026 · Last Updated: June 15, 2026
brainCloud may engage the third-party entities below (each, a “subprocessor”) to process personal data that you include in your use of brainCloud. Each subprocessor upholds brainCloud’s commitments in the brainCloud DPA as referenced in their own DPA listed in the table below.
The subprocessors may change from time-to-time and will be updated on this page.
| Third Party Entity | Description of Processing | Data Types | Location | Data Protection Addendum of Third-Party Entity |
|---|---|---|---|---|
| Amazon Web Services, Inc. | Cloud Provider | brainCloud runs on AWS which hosts the personal data you store in brainCloud | Seattle, WA, USA | https://docs.aws.amazon.com/whitepapers/latest/navigating-gdpr-compliance/aws-data-processing-addendum-dpa.html |
| Google LLC | Cloud Provider | brainCloud may run on Google Cloud Platform (GCP) which hosts the personal data you store in brainCloud | Mountain View, CA, USA | https://cloud.google.com/terms/data-processing-addendum |
| Microsoft Corporation | Cloud Provider | brainCloud may run on Microsoft Azure which hosts the personal data you store in brainCloud | Redmond, WA, USA | https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA |
| Okta, Inc. | Authentication Services (Limited to select Okta-enabled SSO users.) | Okta receives and stores basic information in the course of authenticating you into the service via federated single sign in (e.g, first and last name, business contact info, email). | San Francisco, CA, USA | https://www.okta.com/sites/default/files/2023-12/DATA-PROCESSING-ADDENDUM-Dec.15.2023.pdf |
| MongoDB, Inc. | Database Services | brainCloud stores data in MongoDB databases | New York City, NY, USA | https://www.mongodb.com/legal/data-processing-agreement |
| Twilio | 2FA and SMS Alerts | If you turn on two-factor authentication or SMS alerts, Twilio receives basic info to provide you authentication codes and text alerts (e.g., phone number) | San Francisco, CA, USA | https://www.twilio.com/en-us/legal/data-protection-addendum |
| Intercom R&D Unlimited Co. | Chat Support | If you initiate a chat in the brainCloud website, Intercom receives basic info related to your case (e.g., name, email, phone number, company, country, brainCloud ID). If you include other personal data in your support chats (e.g., snippets of code, application behaviour), this information would also be processed by Intercom. | San Francisco, CA, USA | https://www.intercom.com/legal/data-processing-agreement |
| Stripe | Payment Processor | Stripe receives billing information, such as your name, credit card details, and address, if you pay for brainCloud services by credit card. | San Francisco, CA, USA | https://stripe.com/en-ca/legal/dpa |
| StaxBill (Fusebill) | Payment Processor | StaxBill receives billing information, such as your name, credit card details, and address, if you pay for brainCloud services by credit card. | Ottawa, Ontario, Canada | https://cdn2.hubspot.net/hubfs/547412/FuseBill%20July-%202018/PDFs/Fusebill%20DPA%20-%20CMG%20Revised%20-%20June%2018%202018.pdf |
| Anthropic | AI Services (Claude) | AI inputs, AI outputs, prompts, model requests | San Francisco, CA, USA | https://www.anthropic.com/legal/data-processing-addendum |
We’ll get back to you as soon as we can.
