Sub Processors of Exact with respect to Business Data
This document provides an overview of the sub-processors which Exact may use to deliver (parts of) the Exact Services and process your Business Data as further described in the Privacy Policy.
Sub-processing for the purpose of this overview is to be understood as meaning services which relate directly to the provision of the principal Exact Service(s). This does not include ancillary services, such as telecommunication services, postal / transport services, maintenance and hardware/software support services.
Exact Online
| Entity Name | Sub processing description |
| Rackspace International GmbH | Third Party Service Provider: processing of incoming mail from bank and Database management services |
| Amazon Web Services EMEA SARL | Third Party Service Provider: storage and processing of the Exact Online services |
| Amazon Web Services, Inc. | Third Party Service Provider: for purchasing any market place services or software to be used internally within AWS |
| Microsoft Ireland Operations Ltd. | Third Party Service Provider: storage and processing of the Exact Online services |
| Akamai Technologies Netherlands B.V. | Third Party Service Provider: processing in protecting against DDoS and cyber attacks |
| Lyanthe B.V. | Third Party Service Provider: scan & recognize of incoming and outgoing invoices |
| Interaction Studio | Third Party Software Provider: monitoring and analyzing user behavior for ensuring and improving the services |
| Flowmailer B.V. | Third Party Software Provider: processing of outgoing mail from Exact Online |
| Adyen B.V. | Third Party Service Provider: payment service provider for Exact Online subscriptions |
| Quintensis B.V. (Tradeinterop) | Third Party Service Provider: processing of incoming and outgoing invoices via the PEPPOL network |
| Salesforce.com EMEA Limited | Third Party Service Provider: service and community software |
| Google LLC | Third Part Service Provider: processing in protecting against API overload |
| R&D Unlimited Company (Intercom) | Third Party Service Provider: support of service & community software |
| go2UBL B.V. | An Exact Company: scanning and digitization of documents |
| Service Now | Third Party Service Provider: for IT process & service management including monitoring |
| Secureworks | Third Party Service Provider: provide 24 x 7 Security operations center for detection of any security intrusion |
| Max Mind | Third Party Service Provider: provides true I.P address of all customers accessing Exact Online and required for compliance validation |
| Eset | Third Party Service Provider: provide Antivirus and Malware detection service |
| Plaid | Third Party Service Provider: payment service provider for Exact Online |
| TradeInterop | Peppol Accespoint |
Exact Online HR / Officient
| Entity Name | Sub processing description |
| Amazon Web Services EMEA SARL | Third Party Service Provider: storage and processing of the Officient services |
| Auth0, Inc | Third Party Service Provider: identity provider, processing (federated) authentication requests |
| Browserstack, Inc | Third Party Service Provider: software testing infrastructure |
| R&D Unlimited Company (Intercom) | Third Party Service Provider: support of service & community software |
| Successeve, Inc | Third Party Service Provider: customer success software |
| Twilio, Inc | Third Party Service Provider: messaging software |
| Hubspot Ireland Limited | Third Party Service Provider: customer relationship management software |
| Sendgrid, Inc (part of Twilio, Inc) | Third Party Service Provider: email delivery software API |
| Amplitude, Inc | Third Party Service Provider: product usage analysis software |
| Signicat | Third Party : Digital signing |
| Papertrail | Third party Service Provider: application log storage |
| Mailgun Technologies, Inc | Third Party Service Provider: email delivery API |
| DataDog, Inc. | Third party Service Provider: application log and monitoring solution |
| Cronofy Ltd | Third party Service provider: calendar syncing API |
| Functional Software, Inc. (Sentry product) | Third party Service provider: application error visibility |
| HoshinPlan Strategy S.L. (Promoter Ninja product) | Third Party Service provider: NPS surveys |
Exact SRXP
| Entity Name | Sub processing description |
| Amazon Web Services EMEA SARL | Third Party Service Provider: storage and processing of the Exact SRXP services |
| Loggly | Third Party Service Provider: error detection in the SRXP portal |
| Sendgrid, Inc (part of Twilio, Inc) | Third Party Service Provider: email delivery software |
Globe, Synergy, Private Cloud and other services
| Entity Name | Sub processing description |
| Parentix B.V. | An Exact Company: storage/ hosting |
| Auth0, Inc | Third Party Service Provider: identity provider, processing (federated) authentication requests. |
| Eshgro B.V. | Third Party Service Provider: storage/hosting |
| The Courseware Company B.V. | Third Party Service Provider: software Hosting and technical management |
| Lucanet AG | Third Party Service Provider: support/consultancy |
| Van Spaendonck Services B.V. (“Loket.nl”) | Third Party Service Provider: storage/hosting |
| Rackspace International GmbH | Third Party Service Provider: storage |
| Amazon Web Services EMEA SARL | Third Party Service Provider: storage |
| Quintensis B.V. (Tradeinterop) | Third Party Service Provider: processing of incoming and outgoing invoices via the PEPPOL network |
Gripp
| Entity Name | Sub processing description |
| Oxilion Managed Hosting | hosting |
| Amazon Web Services EMEA SARL | hosting |
| KLIPPA App B.V. | processing of documents for users of Gripp Scan & Herken |
Exact Proquro/Exact Purchase to Pay
| Entity Name | Sub processing description |
| Rackspace International GmbH | Third Party Service Provider: storage |
| Amazon Web Services EMEA SARL | Third Party Service Provider: storage |
| Amazon Web Services, Inc. | Third Party Service Provider: for purchasing any market place services or software to be used internally within AWS |
Reeleezee
| Entity Name | Sub processing description |
| Flowmailer B.V. | Third Party Software Provider: processing of outgoing mail from Exact Online |
| Akamai Technologies Netherlands B.V. | Third Party Service Provider: processing in protecting against DDoS and cyber attacks |
| Datajust B.V. h/o Storecove | Third Party Service Provider: processing of incoming and outgoing invoices via the PEPPOL network |
| Salesforce.com EMEA Limited | Third Party Service Provider: service and community software |
Sub-processors of Exact Payment Services B.V.
| Entity Name | Sub processing description | Geographic/Processing Location | Basis for third-country data transfer |
| Exact Cloud Development Benelux B.V. Molengraaffsingel 33 2629 JD Delft Netherlands |
An Exact affiliate providing service & support configuration, security of services & performance monitoring | The Netherlands | Not applicable |
Exact Payment Services B.V. is an Exact Group B.V. (“Exact”) affiliate. An Exact affiliate is an entity that Exact directly or indirectly controls. Exact Group B.V. is a limited liability company in the Netherlands, registered in the Commercial Register of the Chamber of Commerce under number 27225828, with its registered office at Molengraaffsingel 33, 2629 JD Delft, The Netherlands.
Sub-processors of Exact Cloud Development Benelux B.V.
| Entity Name | Sub processing description | Geographic/Processing Location | Basis for third-country data transfer |
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy L-1855 Luxemburg |
Storage and processing | EU (Frankfurt am Main) | Not applicable |
| Splunk Inc. 250 Brannan Street San Francisco, CA 94107 United States |
Monitoring the Amazon Web Services EMEA SARL cloud | Ireland | EU-U.S. Data Privacy Framework |
| Akamai Technologies Nederland B.V. Grote Bickersstraat 74 1013 KS Amsterdam The Netherlands |
Processing in protecting against DDoS and cyber attacks | The Netherlands | Not applicable |
| Secureworks Inc. Atlanta, Georgia USA |
Providing 24 x 7 Security Operations Center for detection of any security intrusion (Taegis Threat Detection and Response) | USA | EU Standard Contractual Clauses |
| Microsoft BV Evert van de Beekstraat 354 1118 CZ Schiphol, The Netherlands |
Microsoft Defender for status monitoring | Ireland | EU Standard Contractual Clauses |
| N2W Software Cooperation AG | Backup and disaster recovery services for the AWS cloud. N2WS runs on an instance inside the AWS enviroment | Ireland and Germany | EU8 Standard Contractual Clauses |
LAST UPDATED: 12 June 2024