ENTERSOFTONE Sub-Processors

ENTERSOFTONE engages the third-party companies listed below (each, a "sub-processor") to process personal data. ENTERSOFTONE requires its sub-processors, by contractual obligation, to implement appropriate technical and organizational measures ensuring that any sub-processing of personal data is safeguarded to the standards mandated by applicable data protection laws.

Where a sub-processor processes personal data outside the EU/EEA, the transfer safeguard relied on (Standard Contractual Clauses or the EU-US Data Privacy Framework) is shown in the Location(s) of processing column.

ENTERSOFTONE maintains an up-to-date list of the names and locations of all its sub-processors below.

Scope and duration of processing: The scope of processing by sub-processors is limited to the services necessary for the performance of the contract, and its nature (e.g., storage, hosting, backup creation, support services, etc.) does not exceed the nature of the processing approved for the Processor. The duration of the processing coincides with the duration of the contract between the Data Controller and the Data Processor, plus the standard backup retention periods, unless Union or Member State law or another legal or regulatory reason requires longer retention. In such a case, retention is limited to the data that are strictly necessary and to the period required, and the data remain protected by the prescribed measures.