Standard Contractual Clauses (SCCs)
The Standard Contractual Clauses (SCCs) in place with Censornet's Sub-Processors with operations outside of the EEA - that include Amazon, IBM and Microsoft - are accessible below.
These SCCs apply until appropriate adequacy decisions, expected from Brussels shortly, are available.
The SCCs are required after the Court of Justice of the European Union issued a judgment in July 2020 declaring the EU-US Privacy Shield as “invalid”.
For more information please refer to the Censornet Master Services Agreement (MSA) 'Module B - Data Processing Requirements' and specifically clause 4. Transfers outside the EEA.
A copy of the latest MSA is available here.
Sub-Processor SCCs can be accessed via the tables below.
Major Sub-Processors
These Sub-Processors are involved in storage of configuration data and/or log data. All data is encrypted at rest using AES 256-bit. For more details please see the Master Services Agreement.
Amazon (Amazon Web Services - AWS) The Supplier has selected either a specific EU/ESS Data Center location, or a EU/ESS region (eg Western Europe, Northern Europe) depending on the Sub-Processor options provided at the time of provisioning. | |
IBM (IBM Cloud) The Supplier has selected either a specific EU/ESS Data Center location, or a EU/ESS region (eg Western Europe, Northern Europe) depending on the Sub-Processor options provided at the time of provisioning. | |
Microsoft (Microsoft Azure) The Supplier has selected either a specific EU/ESS Data Center location, or a EU/ESS region (eg Western Europe, Northern Europe) depending on the Sub-Processor options provided at the time of provisioning. |
Other Sub-Processors
These Sub-Processors are involved in delivery of ancillary services, such as the sending of OTPs, or service status notifications via email. Their use may depend on how services are configured and which optional add-on services are purchased.
ApriorIT LLC Please note: this Sub-Processor is only used if Email Security (EMS) is purchased. | |
Entrust Please note: this Sub-Processor is only used if MFA powered by IntelliTrust (MFA) is purchased. For EU customers data can be restricted to EU only data center locations depending on the Sub-Processor options selected at the time of provisioning | |
SorryApp Limited Please note: this Sub-Processor is only used if Customers subscribe to system status updates/notifications. | |
Twilio (inc. SendGrid) Please note: this Sub-Processor is only used if MFA is enabled to protect portal (USS) logins. |