-
Introduction and Purpose
At Diliko, we partner with trusted third-party service providers, or subprocessors, to deliver our services securely and efficiently. These subprocessors may process personal data on behalf of Diliko to support our data management and security offerings. This document provides transparency about our subprocessors and outlines the purpose for which each is engaged. Diliko is committed to selecting subprocessors who meet rigorous data protection standards, ensuring compliance with applicable data privacy laws, including the General Data Protection Regulation (GDPR).
-
Definitions
To provide clarity, we define key terms used throughout this document:
- Data Controller: The entity that determines the purposes and means of processing personal data.
- Data Processor: The entity that processes personal data on behalf of the Data Controller.
- Subprocessor: A third-party service provider who processes personal data on behalf of Diliko.
- Personal Data: Any information relating to an identified or identifiable natural person.
- Data Subject: An individual whose personal data is processed.
-
Sub-processor Table
The table below lists the subprocessors engaged by Diliko, the purpose of their services, and links to their privacy policies. We regularly review our list of subprocessors and ensure that each adheres to our data protection standards.
Sub-processor | Location | Purpose of Processing | Policy URL |
Microsoft Azure | USA | Cloud Infrastructure | Microsoft Privacy Policy |
Snowflake | USA | Cloud Data Warehouse | https://www.snowflake.com/privacy-policy/
|
HubSpot | USA | CRM and Marketing | https://legal.hubspot.com/privacy-policy
|
Thoughtspot | USA | Cloud Analytics | https://www.thoughtspot.com/privacy-statement
|
Alkira | USA | Cloud Networking | https://www.alkira.com/privacy-policy/
|
Palo Alto Networks | USA | Cloud Security | https://www.paloaltonetworks.com/legal-notices/privacy
|
ZenDesk | USA | Cloud Ticket Management | https://www.zendesk.com/company/agreements-and-terms/privacy-policy-2021-12-06/
|
Subprocessor Location Purpose of Processing Privacy Policy URL
AWS (Amazon Web Services) USA Cloud Hosting AWS Privacy Policy
Google Cloud USA Data Storage & Analytics Google Privacy Policy
Microsoft Azure USA Data Processing & Security Microsoft Privacy Policy
-
Updates to Subprocessor List
Diliko is committed to transparency regarding changes to our subprocessor list. We will notify customers of any additions, removals, or changes to our subprocessors at least 30 days before the changes take effect. Notifications will be sent via email or made available within our platform.
-
Data Protection Measures
We hold each of our subprocessors to high standards of data protection, requiring compliance with Diliko’s security policies and applicable data protection laws. Before partnering with a subprocessor, Diliko conducts a thorough review of their data security practices. Each subprocessor must demonstrate certification or adherence to industry standards, such as ISO 27001 or SOC 2 compliance, ensuring that personal data remains secure.
Due Diligence Process
Diliko’s selection criteria for subprocessors include:
- Data Protection Compliance: Certification in industry standards such as ISO 27001 and SOC 2.
- Security Standards: Robust policies for data encryption, access control, and monitoring.
- Privacy Practices: Compliance with GDPR, CCPA, and other relevant data protection regulations.
-
Customer’s Rights and Options
Diliko respects the rights of customers to understand and manage data processed by our subprocessors. Customers may:
- Objection Rights: Object to the engagement of a particular subprocessor, if there is a reasonable basis related to data privacy or security. Please contact us with any objections or concerns, and we will work to accommodate or address them where feasible.
- Data Processing Agreement (DPA): We maintain DPAs with all subprocessors, ensuring their compliance with relevant data privacy laws and our security standards.
-
Contact Information
If you have questions, concerns, or requests regarding our subprocessors, please reach out to us. Our data protection team is available to address any inquiries:
Email: [email protected]
Mail: Diliko, Data Protection Office, 12110 Sunset Hills, Suite 600, Reston, VA 20190