Sub Processors of Exact with respect to Business Data
This document provides an overview of the sub-processors which Exact may use to deliver (parts of) the Exact Services and process your Business Data as further described in the Privacy Policy.
Sub-processing for the purpose of this overview is to be understood as meaning services which relate directly to the provision of the principal Exact Service(s). This does not include ancillary services, such as telecommunication services, postal / transport services, maintenance and hardware/software support services.
Exact Online and Exact Online Premium
| Entity Name | Sub processing description | Location | Basis for third-country data transfer |
| Rackspace International GmbH Balz-Zimmermann Strasse 7 8302 Kloten Switzerland |
Third Party Service Provider: processing of incoming mail from bank and Database management services | Netherlands | Not applicable |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855 Luxemburg |
Third Party Service Provider: storage and processing of the Exact Online services | Exact Online customers in the countries NL, BE, US: Dublin, Ierland Exact Online customers in the countries DE,FR,UK, and OpenAccounting customers: Frankfurt, Germany |
Not applicable |
| Microsoft Ireland Operations Ltd. One Microsoft Place South County Business Park Leopardstown Dublin 18 D18 P521 Ireland |
Third Party Service Provider: storage and processing of the Exact Online Premium services | Exact Online Customers in the country ES, Exact Online Premium customers in the countries NL and BE :North Europe - Ireland Exact Online Premium Customers in the country DE Premium: Germany West Central - Frankfurt |
Not applicable |
| Microsoft B.V. Evert van de Beekstraat 354 1118 CZ Schiphol Netherlands |
Third Party Service Provider: using Microsoft Defender for increased security and status monitoring. | Ireland | Not applicable |
| Akamai Technologies Netherlands B.V. Grote Bickersstraat 74 1013 KS Amsterdam Netherlands |
Third Party Service Provider: processing in protecting against DDoS and cyber attacks | Varies based on the customer's login country. | EU-US Data Privacy Framework |
| Lyanthe B.V. Peijerstraat 68-70 6101 GE Echt Netherlands |
Third Party Service Provider: scan & recognize of incoming and outgoing invoices. Approved outsourcing to Philippines. | Netherlands, Philippines | Not applicable |
| Flowmailer B.V. Boris Pasternaklaan 16 2719 DA Zoetermeer Netherlands |
Third Party Software Provider: processing of outgoing mail from Exact Online | Netherlands | Not applicable |
| Quintensis B.V. (Tradeinterop) Rijnzathe 6 3454 PV De Meern Netherlands |
Third Party Service Provider: processing of incoming and outgoing invoices via the PEPPOL network | Ireland | Not applicable |
| SFDC Ireland Ltd. Salesforce Tower Dublin North Dock Dublin 1 D01 W2Y3 Ireland |
Third Party Software Provider: service and community software, Interaction Studio : monitoring and analyzing user behavior for ensuring and improving the services | Germany | Not applicable |
| Google Cloud EMEA Limited 70 Sir John Rogerson's Quay Dublin 2 Ireland |
Third Part Service Provider: processing in protecting against API overload and security | europe-west3 Google location Frankfurt, Germany, Europe |
Not applicable |
| Atlassian Corporation Atlassian. Pty Ltd Level 6, 341 George Street Sydney NSW 2000 Australia |
Third Party Service Provider: Service and community software, also being used as a customer portal | EU Standard Contractual Clauses | |
| go2UBL B.V. Wijkermeerweg 72 1948 NX Beverwijk Netherlands |
An Exact Company: scanning and digitization of documents, for more details see below | An Exact Company: scanning and digitization of documents, for more details see below | An Exact Company: scanning and digitization of documents, for more details see below |
| ServiceNow Nederland B.V. Hoekenrode 3 1102 BR Amsterdam Netherlands |
Third Party Service Provider: for IT process & service management including monitoring | Ireland with pair to Amsterdam, Netherlands | Not applicable |
| Dell B.V. (t/a Secureworks) Transformatorweg 38 -72 1014 AK Amsterdam Netherlands |
Third Party Service Provider: provide 24 x 7 Security operations center for detection of any security intrusion (Taegis Threat Detection and Response) | USA East Region | EU Standard Contractual Clauses |
| Max Mind Inc. 51 Pleasant Street #1020 Malden, MA 02148 USA |
Third Party Service Provider: provides true I.P address of all customers accessing Exact Online and required for compliance validation | USA | US-EU Data Privacy Framework https://www.dataprivacyframework.gov/participant/4532 |
| Dataswitcher B.V. Schimmelt 48 A 5611ZX Eindhoven Netherlands |
Third Party Service Provider: For Exact Online customers in Belgium to provide data migration services . | Ireland | Not applicable |
Exact Online HR / Officient
| Entity Name | Entity Type | Location | Basis for third-country data transfer |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855 Luxemburg |
Third Party Service Provider: storage and processing of the Officient services | Ireland | Not applicable |
| Auth0, Inc 10800 NE 8th Street, Suite 600, Bellevue, WA, 98004, USA |
Third Party Service Provider: identity provider, processing (federated) authentication requests | USA | EU Standard Contractual Clauses |
| Browserstack, Inc 4512 Legacy Dr., Suite 100 Plano, TX 75024 USA |
Third Party Service Provider: software testing infrastructure | Ireland | EU Standard Contractual Clauses |
| R&D Unlimited Company (Intercom) 2nd Floor Stephen Court 18-21 Street Stephen's Green Ireland |
Third Party Service Provider: support of service & community software | Ireland | Not Applicable |
| Twilio Ireland Limited 70 Sir John Rogerson’s Quay Dublin 2, D02 R296 Ireland |
Third Party Service Provider: messaging software and email delivery API | Ireland | Binding Corporate Rules |
| Hubspot Ireland Limited 1 Sir John Rogerson's Quay Dublin 2 Ireland |
Third Party Service Provider: customer relationship management software | Germany | Not Applicable |
| Signicat AS Beddingen 16 7042 Trondheim Norway |
Third Party : Digital signing | EEA | Not Applicable |
| Cronofy Ltd. 9a Beck Street Nottingham, NG1 1EQ England |
Third party Service provider: calendar syncing API | Germany/UK | EU Adequacy decision |
| Functional Software, Inc. (Sentry) 45 Fremont St, 8th Floor, San Francisco, CA 94105 USA |
Third party Service provider: application error visibility | Europe | EU US Data Privacy Framework |
| Zapier Inc. 548 Market St. 62411 San Francisco, CA 94104-5401 USA |
Web service that alows to connect other web services to Officient | USA | EU Standard Contractual Clauses |
| Dell B.V. (t/a Secureworks) Transformatorweg 38 -72 1014 AK Amsterdam Netherlands |
Third Party Service Provider: provide 24 x 7 Security operations center for detection of any security intrusion ( (Taegis Threat Detection and Response) | US East Region | EU Standard Contractual Clauses |
| Microsoft Ireland Operations Ltd. One Microsoft Place South County Business Park Leopardstown Dublin 18 D18 P521 Ireland |
Third Party Service Provider: using Microsoft Defender for increased security and status monitoring. | Ireland | Not applicable |
| Akamai Technologies Netherlands B.V. Grote Bickersstraat 741013 KS Amsterdam Nederland |
Third Party Service Provider: processing in protecting against DDoS and cyber attacks | Global | EU-US Data Privacy Framework |
Exact SRXP
| Entity Name | Entity Type | Location | Basis for third-country data transfer |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855 Luxemburg |
Third Party Service Provider: storage and processing of the Exact SRXP services | Ierland | Not applicable |
| Sendgrid, Inc (part of Twilio, Inc) 101 Spear St, Ste 500 San Francisco, CA 94105 USA |
Third Party Service Provider: email delivery software | USA | Twilio's Binding Corporate Rules |
| Microsoft B.V. Evert van de Beekstraat 354 1118 CZ Schiphol Netherlands |
Third Party Service Provider: using Microsoft Defender for increased security and status monitoring. | Ireland | Not applicable |
Exact Cloud Services and Exact Private Cloud
| Entity Name | Entity Type | Location | Basis for third-country data transfer |
| Parentix B.V. Ptolemaeuslaan 70 3528 BP Utrecht Netherlands |
An Exact Company: provider of CloudX, storage and hosting | Netherlands (Amsterdam) | Not applicable |
| Microsoft Ireland Operations Ltd. One Microsoft Place South County Business Park, Leopardstown Dublin 18 D18 P521, Ireland |
Third Party Service Provider of Azure | Ireland | Not applicable |
| Microsoft B.V. Evert van de Beekstraat 354 1118 CZ Schiphol Netherlands |
Third Party Service Provider of M365 | Netherlands (Amsterdam) | Not applicable |
Globe, Synergy and other services
| Entity Name | Entity Type | Location | Basis for third-country data transfer |
| Lucanet AG Alexanderplatz 1 10178 BERLIN Germany (DE) |
Third Party Service Provider: support/consultancy | Germany | Not applicable |
Exact Salaris Plus |
|||
| Van Spaendonck Services B.V. (“Loket.nl”) Reitseplein 1 5037 AA Tilburg Netherlands |
Third Party Service Provider: storage/hosting provider for customers of Exact Salaris plus | Netherlands | Not applicable |
| Rackspace International GmbH Balz-Zimmermann Strasse 7 8302 Kloten Switzerland |
Third Party Service Provider: Monitoring database and consultancy | Netherlands | Not applicable |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855 Luxemburg |
Third Party Service Provider: storage and processing | Ierland, Germany This differs for customers in different countries |
Not applicable |
| Quintensis B.V. (Tradeinterop) Rijnzathe 6 3454 PV De Meern Netherlands |
Third Party Service Provider: processing of incoming and outgoing invoices via the PEPPOL network | Ireland | Not applicable |
| Microsoft B.V. Evert van de Beekstraat 354 1118 CZ Schiphol Netherlands |
Third Party Service Provider of M365 | Netherlands (Amsterdam) | Not applicable |
Exact Proquro/Exact Purchase to Pay
| Entity Name | Entity Type | Location | Basis for third-country data transfer |
| Rackspace International GmbH Pfingstweidstrasse 60, 8005 Zürich, Switzerland |
Third Party Service Provider: Monitoring database and consultancy | Netherlands | Not applicable |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855, Luxembourg Belgium |
Third Party Service Provider: storage and processing of the proquro services | Ireland with cross region back up location Germany. | Not apllicable |
| Akamai Technologies Netherlands B.V. Grote Bickersstraat 74 1013 KS Amsterdam Netherlands |
Third Party Service Provider: processing in protecting against DDoS and cyber attacks | Varies based on the customer's login country. | EU-US Data Privacy Framework |
Reeleezee
| Entity Name | Entity Type | Location | Basis for third-country data transfer |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855 Luxemburg |
Third Party Service Provider: storage and processing | Ireland | Not apllicable |
| Flowmailer B.V. Boris Pasternaklaan 16 2719 DA Zoetermeer Netherlands |
Third Party Software Provider: processing of outgoing mail | Netherlands | Not applicable |
| Akamai Technologies Netherlands B.V. Grote Bickersstraat 74 1013 KS Amsterdam Netherlands |
Third Party Service Provider: processing in protecting against DDoS and cyber attacks | Varies based on the customer's login country. | EU-US Data Privacy Framework |
| SFDC Ireland Ltd. Salesforce Tower Dublin North Dock Dublin 1 D01 W2Y3 Ireland |
Third Party Software Provider: service and community software, Interaction Studio : monitoring and analyzing user behavior for ensuring and improving the services | Germany | Not apllicable |
Sub-processors of go2UBL B.V.
go2UBL provides a service to scan & recognize incoming and outgoing invoices/documents
| Entity Name | Sub processing description | Location | Basis for third-country data transfer |
| SA Commercial (Pty) LTD,SA Commercial (Pty) LTD 22 Long Street Cape Town, South Africa |
Business process outsourcing provider for data capturing and data entry services. | South Africa | EU Standard Contractual Clauses |
| Ale Bosma Ventures Corp. Mandado Street San Remigio 6011 Cebu Philippines |
Business process outsourcing provider for data capturing and data entry services. | Philippines | EU Standard Contractual Clauses |
| Bluzor B.V. Smartbooqing Deldenerstraat 70 7551 AH Hengelo Netherlands |
Business process outsourcing provider for data capturing and data entry services with approved sub-processing in India | India | Not applicable |
| Innovature Consulting Co. Ltd. Ree Tower, 9 Doan Van Bo st, Ward 13, District 4 Ho Chi Minh City Vietnam |
Business process outsourcing provider for data capturing and data entry services. | Vietnam | EU Standard Contractual Clauses |
| Intelly B.V. Laagveld 1 6014 DD Ittervoort Netherlands |
Maintenance and development of the go2UBL platform. | Netherlands | Not applicable |
| Intelly Hosting B.V.Laagveld 1 6014 DD Ittervoort Netherlands |
Hosting services provider for the go2UBL platform and the Robot | Netherlands | Not applicable |
| Intelly Sales B.V. Laagveld 1 6014 DD Ittervoort Netherlands |
Provider of (sub) Software license to go2UBL B.V. | Netherlands | Not Applicable |
| Auth0, Inc. 10800 NE 8th St, Suite 600 Bellevue WA 98004 USA |
Provider of authentication and acces management | USA | EU Standard Contractual Clauses |
| Exact Cloud Development Benelux B.V. Molengraaffsingel 33 2629 JD Delft Netherlands |
An Exact subsidiary providing hosting services & support configuration, security services & performance monitoring | Netherlands | Not applicable |
Sub-processors of Exact Cloud Development Benelux B.V. for go2UBL
| Entity Name | Sub processing description | Location | Basis for third-country data transfer |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855 Luxemburg |
Hosting services provider for the go2UBL platform and the Robot | EU (Frankfurt am Main) | Not applicable |
| Exact Group B.V. Molengraaffsingel 33 2629 JD Delft Netherlands |
Provision of support services to operate the MS Office suite | European Union | Not applicable |
Sub-processors of Exact Group B.V. for go2UBL
| Entity Name | Sub processing description | Location | Basis for third-country data transfer |
| Microsoft Ireland Operations Ltd. Atrium Building B Dublin 18 Dublin Ireland |
Storage and processing of mail, files, SharePoint sites and Teams chats in relation to customer support functions of go2UBL | European Union | Not applicable |
go2UBL B.V. is an Exact Group B.V. (“Exact”) subsidiary. An Exact subsidiary is an entity that Exact directly or indirectly controls. Exact Group B.V. is a limited liability company in the Netherlands, registered in the Commercial Register of the Chamber of Commerce under number 27225828, with its registered office at Molengraaffsingel 33, 2629 JD Delft, The Netherlands.
Sub-processors of Exact Payment Services B.V.
| Entity Name | Sub processing description | Location | Basis for third-country data transfer |
| Exact Cloud Development Benelux B.V. Molengraaffsingel 33 2629 JD Delft Netherlands |
An Exact affiliate providing service & support configuration, security of services & performance monitoring | Netherlands | Not applicable |
Exact Payment Services B.V. is an Exact Group B.V. (“Exact”) affiliate. An Exact affiliate is an entity that Exact directly or indirectly controls. Exact Group B.V. is a limited liability company in the Netherlands, registered in the Commercial Register of the Chamber of Commerce under number 27225828, with its registered office at Molengraaffsingel 33, 2629 JD Delft, The Netherlands.
Sub-processors of Exact Cloud Development Benelux B.V. for Exact Payment Services B.V.
| Entity Name | Sub processing description | Location | Basis for third-country data transfer |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855 Luxemburg |
Storage and processing | EU (Frankfurt am Main) | Not applicable |
| Splunk Inc. 250 Brannan Street San Francisco, CA 94107 United States |
Monitoring the Amazon Web Services EMEA SARL cloud | Ireland | EU-U.S. Data Privacy Framework |
| Akamai Technologies Nederland B.V. Grote Bickersstraat 74 1013 KS Amsterdam Netherlands |
Processing in protecting against DDoS and cyber attacks | Netherlands | Not applicable |
| Secureworks Inc. Atlanta, Georgia USA |
Providing 24 x 7 Security Operations Center for detection of any security intrusion (Taegis Threat Detection and Response) | USA | EU Standard Contractual Clauses |
| Microsoft B.V. Evert van de Beekstraat 354 1118 CZ Schiphol Netherlands |
Microsoft Defender for status monitoring | Ireland | EU Standard Contractual Clauses |
| N2W Software Cooperation AG | Backup and disaster recovery services for the AWS cloud. N2WS runs on an instance inside the AWS enviroment | Ireland and Germany | EU Standard Contractual Clauses |
LAST UPDATED: 17 January 2025