1. Notice
We maintain this list to support GDPR Article 28 transparency. Enterprise customers receive notification of material sub-processor changes per their DPA.
Questions: privacy@sigigo.com.
2. sigigo.com (marketing website)
| Provider | Purpose | Location | Data processed |
|---|---|---|---|
| Vercel Inc. | Website hosting and edge delivery | United States / global edge | IP address, request logs, deployment metadata |
| Google LLC (Google Tag Manager) | Website analytics (with consent) | United States / global | Usage data, cookie identifiers, device/browser metadata |
| Clerk Inc. | Authentication for team/studio areas | United States | Account identifiers, email, session metadata when you sign in |
| Contentful GmbH | Content management for blog and editorial | Germany / EU and United States | Content metadata; no visitor PII unless submitted via CMS workflows |
3. Sigigo platform (customer services)
Production tenants may use additional sub-processors depending on deployment profile and region. The list below reflects core infrastructure; your order form or DPA may include customer-specific additions.
| Provider | Purpose | Location | Data processed |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud infrastructure (compute, storage, KMS, logging) | Customer-selected region (EU available) | Customer evidence records and platform metadata per tenant configuration |
| Microsoft Corporation (Microsoft Azure) | Cloud infrastructure (compute, storage, Key Vault, logging) | Customer-selected region (EU available) | Customer evidence records and platform metadata per tenant configuration |
4. Updates
We update this page when we engage or replace sub-processors that affect website visitors or standard platform delivery. Last reviewed with our legal and compliance documentation set.