Sub-processors

To support the delivery of our Services, Morescope AS may engage and use data processors with access to personal data of our Customer (each, a “Subprocessor”). This page provides vital information about the identity, location, and role of each Subprocessor. Terms used on this page but not defined have the meaning outlined in the Software Service Agreement or superseding written agreements between Customer and Morescope.

Third-Party Sub-Processors for the Morescope Platform (the “Service”) processing Customer Personal Data

Morescope and its affiliates engage the following third-party entities to assist in connection with the Service as specified below:
Entity name
Service Location
Registered address
Service
Task performed
GDPR Compliance
Link to DPA
Data Privacy Framework (if applicable)
Type of data stored
Storage period
Posthog Inc
EU/EEA (Germany)
Seattle, WA 98109-5210, USA
PostHog, PostHog Cloud EU
User Analytics
Name, email, IP address, location
*
SurveySparrow Inc
EU/EEU (UK and Germany)
2345 Yale St FL 1, Palo Alto, CA 94306, USA
SurveySparrow
Customer satisfaction measuring, surveys
Name, email, location, IP address
*
OneSchema AI, Inc.
Germany
Andrew Luo 445 Bush St Suite 100 San Francisco, CA 94108 United States
OneSchema
Streamlining uploading of excel and csv files.
Any data users upload through our excel/csv uploading flow. This may contain personal data, though usually ment for transactional and activity data.
*
Abstract API Inc
France**
600 California Street San Francisco, CA 94108, USA
Abstract API
Publicly accessible data (Geolocation services, exchange rates etc)
IP address, location
*
Microsoft Corporation
Nothern Europe (Norway and Sweden)
One Microsoft Way, USA
Azure and Databricks
Data senters, servers and cloud computing
Contact info (name, email and phone number) and other uploaded data (personal number, financial data)
*
Intuit Inc
USA***
675 Ponce de Leon Ave NE, Atlanta, USA
Mailchimp ("The Rocket Science Group LLC d/b/a Mailchimp")
Email list managing and sending
Name, email, associated company
*
Slack Technologies LLC
USA***
500 Howard Street, San Francisco, California 94105, USA
Slack
Instant messaging services, automatic warnings and alerts to the support team
Name and surname, company name, email address,
Deleted after 90 days
Appfarm AS
Global (EU/EEA and USA)
Universitetsgata 2 0164 OSLO, Norway
Appfarm Create
Development platform, authentication, and servers
User-facing platform hosting, temporary storage
*
Mixpanel
EU/EEA
One Front Street, 1 Front St #28th, San Francisco HQ, USA
Data Analytics
User-data Logging
Email, User Name, User Action, User Role, Company
*
Intercom
USA ***
55 2nd Street, 4th Floor, San Francisco, CA 94105, USA
Support
In-tool support feature
Email, User name, support message
*
Mailgun Technologies Inc
EU/EEA
548 Market Street, Suite 43099, San Francisco, CA 94101, USA
E-mail
E-mail services
Email address
Deleted after 30 days
Amazon Web Services EMEA SARL
Sweden
38 avenue John F. Kennedy, L-1855 Luxembourg, R.C.S. Luxemburg
Amazon Web Services
Cloud infrastructure for servers and databases. Email.
User IP-address and email address
*
Google Cloud EMEA Limited
Belgium
Gordon House, Barrow Street, Dublin 4, Ireland
Google Cloud Platform
Cloud infrastructure for servers and databases
User IP-address and email address
*
* Customer data is continuously stored (and backed up) as long as the customer has an active Morescope subscription. Customer data is stored up to 6 months after a subscription is canceled (if not otherwise instructed by the Customer) to facilitate Customer’s data transfer procedures
** Data is sent to the closest node to the user. For users located in EEU, this is with this region. For users outside the EEU, this might might be in the US.
*** In the Data Privacy Framework program, a EU–US transatlantic data transfer framework between the United States and the European Union.
‍
Morescope may also use other third-party service providers to process personal data from individuals, interacting with Morescope outside the use of the Service, if it is necessary to provide you with a contractual service (GDPR art. 6.1 b), if we are required by law, court orders or legal processes to disclose your personal data (GDPR art. 6.1 c), or it can be justified based on our legitimate interest in doing so (GDPR art. 6.1 f). Examples of this would be cloud-based email, accounting, and CRM systems. Please see Morescope’s privacy policy for more information.

About the EU-US Data Privacy Framework

‍

In July 2023, the EU approved the EU-US Data Privacy Framework, facilitating the transfer of personal data from the EU to the US. This decision followed the invalidation of the previous Privacy Shield framework by the EU Court of Justice due to privacy concerns. The new framework aims to ensure stronger protections for EU citizens' data, including oversight mechanisms and redress options, thereby addressing the issues raised by the court and providing a legal basis for data transfers between the two regions.

Since the Schrems II decision, transfer of personal data from the EU to the US has basically been illegal according to GDPR. This new legislation have replaced the Privacy Shield and Schrems II, and self-certified US data senters on the EU-US Data Privacy Framework list can store and process European personal data compliant to the GDPR.

‍

Read more here:

DPF: https://www.dataprivacyframework.gov/Program-Overview#:~:text=The%20EU%2DU.S.%20Data%20Privacy,with%20reliable%20mechanisms%20for%20personal

European Comission: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

Datatilsynet (Norwegian): https://www.datatilsynet.no/aktuelt/aktuelle-nyheter-2023/nye-regler-for-overforing-av-personopplysninger-til-usa/

‍

Updates

‍

17. Nov. 2023

Inuit INC was added as a sub-processor for the Service. Following our DPA, the change will take affect on the 20th of December 2023.

‍

18. Dec. 2023

Microsoft Corporations was added as a sub-processor for the Service. Following our DPA, the change will take affect on the 18th of January 2023.

‍

22. Mar. 2024

Docusign Inc, Celonis Inc, and Abstract API Inc was added as sub-processors. Following our DPA, the change will take affect on the 22nd of April 2024.

‍

16. Sep. 2024

OneSchema AI Inc and SurveySparrow Inc was added as sub-processors. Following our DPA, the change will take affect on the 16th of Oct 2024. Also, CarboneIO SAS was removed as a sub-processor.

‍

23. Dec 2024

PostHog Inc was added as sub-processors. Following our DPA, the change will take affect on the 23th of Jan 2025.

‍

QUICK LINKS
For companies
For impact investors
RESOURCES
Methodology
Privacy policy
Sub-processors
ABOUT
About us
News and updates
© 2024 Morescope AS. All rights reserved
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
PreferencesDenyAccept