Introduction

We use the third party entities below (each, a “Subprocessor”) to process personal data related to the Apps on behalf of our Customers and in accordance with contract terms between HeroCoders and the Subprocessor to uphold our commitments under the Terms of Service and the Data Processing Agreement. 

Please note that this document does not refer to the situation when we operate as a data controller - it covers the relation Customer (data controller) → HeroCoders (processor) → Subprocessor. Furthermore, different Subprocessors may be involved in the data processing depending on the App provided, which is also indicated in the table below. 

We impose obligations on our Subprocessors to implement appropriate technical and organizational measures ensuring that the subprocessing of personal data is protected to the required standards. HeroCoders shall use all commercially reasonable efforts to carry out annual compliance reviews of its Subprocessors, and where the engagement of a Subprocessor requires the cross-border transfer of personal data, to conduct transfer impact assessments for these data transfers.

You may sign up for emails at our Trust Center to be notified when we engage a new Subprocessor or replace the existing one.

Definitions

1. The following notations are used for showing the type of personal data processed in our Apps:
U: (User) → Processing of User’s data;
O: (Other) → Processing of someone else's data or processing of User’s data under certain conditions.

2. The following notations are used for our Apps:
CHF → Checklist Free for Jira
CHP → Checklist Pro  for Jira
CHE → Checklist Enterprise  for Jira
CHT → Checklist for MS Teams
CLKF → Clockwork Free for Jira
CLKP → Clockwork Pro for Jira
CLKM → Clockwork for monday.com
AC → Acceptance Criteria for Jira
EM → Epics Map for Jira

3. All capitalized terms not defined herein shall have the meanings ascribed to them in the Terms of Service.

Table

Subprocessor Services provided App Processing location Personal data Explanation Security measures
Amazon Web Services EMEA SARL Infrastructure services CHF
CHP
CHE
CLKF
CLKP
Europe U → IP address¹, User Content entered into the App² ¹CLKF and CLKP use AWS as a CDN. AWS logs the IP address for these requests;
²CHF, CHP and CHE use AWS as an encrypted secondary backup storage;
Compliance Programs - Amazon Web Services (AWS)
DataDog, Inc. Infrastructure monitoring CLKF
CLKP
United States U → IP address IP address is contained in logs of all HTTP requests; Security | Datadog
Functional Software, Inc.
(Sentry)
Software development services CHF
CHP
CHE
CHT
CLKF
CLKP
CLKM
AC
EM
United States U → IP address IP of the HTTP requests are sent to Sentry; Security & Compliance | Sentry
Heroku, Inc.
(a Salesforce company)
Infrastructure services CHF
CHP
CHE
CHT
CLKF
CLKP
CLKM
AC
EM
United States¹
Europe¹
U → IP address², User Content entered into the App³ ⁴
¹Depending on Customer’s selection via the data residency feature in CHE;
²IP of the HTTP requests are stored by Heroku in the logs;
³CHT, CLKF, CLKP and CLKM use Heroku as a database;
⁴CHF, CHP, CHE and AC process data via the encrypted trasmission to their database;
ISO, SOC, HIPAA, PCI Compliance | Heroku
Intercom R&D UC Customer support CHE
CLKF
CLKP
United States U → IP address¹
O → name², email address², User Content entered into the in-app dialogue²
¹IP address is contained in logs of all HTTP requests;
²Applies only to the User who contact our customer support through the in-app dialogue and leave additional optional data;
Trust Center - Intercom
MongoDB, Inc. Infrastructure services CHF
CHP
CHE
AC
United States¹
Europe¹
U → User Content entered into the App² ¹Depending on Customer’s selection via the data residency feature in CHE;
²Mentioned Apps use MongoDB as encrypted data storage and primary backup storage;
MongoDB Atlas Trust Center | MongoDB
NewRelic, Inc. Infrastructure monitoring CHF
CHP
CHE
AC
United States U → IP address IP address is contained in logs of all HTTP requests; Security Overview | New Relic
SolarWinds Worldwide, LLC
(Papertrail)
Application log management and archive CHF
CHP
CHE
CHT
CLKM
AC
EM
United States U → IP address Mentioned Apps use Papertrail to archive their logs for 365 days; SolarWinds - Security Information
Twilio Ireland Ltd.
(SendGrid)
Sending emails CLKP Europe O → name, email address Applies only to the User selected by their Manager to notify to log work; Security Overview | Twilio