Riipen is a data processor and engages certain onward subprocessors that may process personal data submitted to Riipen’s services by the controller. These subprocessors are listed below, with a description of the service and the location where data is hosted. This list may be updated by Riipen from time to time:

  • Amazon Web Services, Inc. - Hosting and Storage (Canada)
  • Delighted, LLC - User Feedback (USA)
  • Forest Admin, Inc. - Data administration (USA)
  • Hubspot, Inc - Customer relationship management (USA)
  • Intercom Inc. - Customer support (USA)
  • Metabase, Inc. - Data administration (USA)
  • Mixpanel, Inc. - Data analytics (USA)
  • New Relic, Inc. - Performance monitoring (USA)
  • OpenAI, Inc. - Data processing & analytics (USA)
  • Persona - Identity verification (USA)
  • Rollbar, Inc. - Error detection (USA)
  • Stripe, Inc. - Payment provider (USA)
  • Tipalti - Invoice management system (USA)
  • Twilio Inc. - Email delivery (USA)

Data Processing Addendum

GDPR Article 28, Section 3, requires that a contract be in place between a data controller and a data processor. For years, the Riipen Terms of Service and Privacy Policy have provided the fundamental legal requirements and obligations regarding data ownership, processing, behaviour, safeguarding data, and more.

However, to provide added GDPR coverage and compliance, we provide this additional contract for your approval / signature as required.

Click here to download the Data Processing Addendum