Entity Name

Subject matter, nature and description of the processing (including a clear delimitation of responsibilities in case several sub-processors are authorised)

Sub-processor location(s)

Address and Contact person's name, position and contact details

Duration of processing

Technical and Organisational Measures to be taken by the sub- processor to be able to provide assistance to the exporter / importer

AgileThought

Software development and support services

[to be completed]

[to be completed]

continuous

[to be completed]

Agiloft

Contract and third party management system

continuous

Aires

[to be completed]

[Due to the nature of the services, Aires will engage other vendors to provide the services. That would however fall under the relationship between the employee and Aires.]

[to be completed]

continuous

[to be completed]

American Express

[to be completed]

2 Dell (now branded NTT) Data Centers - One in Quincy, WA and the other in Cincinatti, OH

[to be completed]

continuous

[to be completed]

Amex GBT

[to be completed]

Platform hosted by KDS Neo. Data might be shared with other companies of the Amex GBT group. 2 Dell (now branded NTT) Data Centers - One in Quincy, WA and the other in Cincinatti, OH

[to be completed]

continuous

[to be completed]

Amazon Web Services

Infrastructure, application or data management services for building and hosting applications and infrastructure

USA

[to be completed]

continuous

[to be completed]

AON

Anduin

Avature

Recruiting platform

The Netherlands

continuous

Azure

Infrastructure, application or data management services for building and hosting applications and infrastructure

USA

[to be completed]

continuous

[to be completed]

BDO

Beeline

Brightcove

[to be completed]

[to be completed]

[to be completed]

continuous

[to be completed]

DevBridge

Software development and support services

[to be completed]

[to be completed]

continuous

[to be completed]

Discovery

Druva, Inc.

Data protection and Disaster Recovery, in the Cloud and Datacenters and Governance

[to be completed]

[to be completed]

continuous

[to be completed]

Dynata

Market research provider

[to be completed]

[to be completed]

continuous

[to be completed]

Echelon Consulting LLC

Software development and support services

USA

[to be completed]

continuous

[to be completed]

Echelon BPO Private Limited

Software development and support services

India

continuous

Follow Analytics

Software development and support services

[to be completed]

[to be completed]

continuous

[to be completed]

FTI Consulting

Google

[to be completed]

[to be completed]

[to be completed]

continuous

[to be completed]

HireRight

Background check provider

Data stored on HireRight servers and backed up on Iron Mountain servers in the USA

[to be completed]

continuous

[to be completed]

Hubspot

[to be completed]

[to be completed]

[to be completed]

continuous

[to be completed]

Iconik.io (Iconic Media AB)

Inc-Query

Survey platform and survey coding services

[to be completed]

[to be completed]

continuous

[to be completed]

Indium Software

Software development and support services

[to be completed]

[to be completed]

continuous

[to be completed]

KPMG

SharePoint 2013 Application Platform (SPAP)

US Data Center, KPMG data centers in Montvale, NJ and Dallas, TX

[to be completed]

continuous

[to be completed]

LinkedIn

[to be completed]

[to be completed]

[to be completed]

continuous

[to be completed]

Marketo

[to be completed]

[to be completed]

[to be completed]

continuous

[to be completed]

Mendix

Low-Code application development platform

[to be completed]

[to be completed]

continuous

[to be completed]

Mercer

Microsoft

Infrastructure, application or data management services for building and hosting applications and infrastructure

USA

[to be completed]

continuous

[to be completed]

Mphases

Software development and support services

[to be completed]

[to be completed]

continuous

[to be completed]

Netquest

Market Reseach

NGS

Okta

Single sign-on for accounts on bain.com

[to be completed]

[to be completed]

continuous

[to be completed]

Pendo

Data analytics for Bain tools

[to be completed]

[to be completed]

continuous

[to be completed]

Pymetrics

[to be completed]

Hosts data on AWS and Microsoft Azure servers. They use Zendesk (USA) and Magellan (Philippines) for client management

[to be completed]

continuous

[to be completed]

Qualtrics

Survey platform provider

Germany

[to be completed]

continuous

[to be completed]

R.R. Donnelley & Sons Company

Marketing and business communication services

Riverside.fm

Video recordings platform

Hosts data on Amazon Web Services, Inc. (USA). They use MongoDB, Inc. (USA) as a program database and Nexmo, Inc. (USA) as a cloud comunication provider.

Aner Rabinivitz, Data Protection Officer (DPO@riverside.fm)

continuous

The ones included in the Data Processing Agreement (Bain’s Data Security Schedule)

RSM

Salesforce

CRM

Germany

[to be completed]

continuous

[to be completed]

SAP Litmos

Platform provisioning and hosting

[to be completed]

[to be completed]

continuous

[to be completed]

Superside (Konsus, Inc.)

Creative services capabilities (Ad agency) design support

Hosts data on Amazon Web Services, Inc. (USA). In addition, depending on the services, Superside works with specific certain providers. List of sub processors: https://www.superside.com/subprocessors

Dataprivacy@superside.com

continuous

Included in Annex II to the online SCCs.

Tableau

Visualisation tool to perform complex visual analysis on large datasets

[to be completed]

[to be completed]

continuous

[to be completed]

TimeSeries

Software development and support services

[to be completed]

[to be completed]

continuous

[to be completed]

TrainedOn

Provision of workshop agenda and planning services

Hosts data on Amazon Web Services, Inc. (USA). List of sub processors: https://www.sessionlab.com/support/third-party-service-providers/

Robert Cserti, Managing Director, support@sessionlab.com

continuous

The ones included in Annex 2 to the DPA

Unmind

Provision of workplace wellbeing platform

Hosts data on Amazon Web Services, Inc. (Republic of Ireland). Braze (EU), Mailchimp (USA), Twilio (USA), Zendesk (USA), Merge.dev (Multi region) and Auth0 (EU).

Andrew Lock (DPO), privacy@unmind.com

continuous

The ones included in Annex 4 to the DPA.

Vistra

Corporate services (to be determined on each of the SOWs)

Microsoft Azure (US), Salesforce and Evergage (to manage client accounts), Nexonia and Nmbrs and Freshdesk (US) and any other Vistra Partners approved in the SOW.

General Counsel: privacy@vistra.com 

continuous

The ones included in Schedule 4 of the DPA.

Webflow

Design, creation and hosting of websites

[to be completed]

[to be completed]

continuous

[to be completed]

WorkDay

HR management platform

Data centers in Ashburn, Virginia; Dublin, Ireland; and Hillsboro, Oregon. List of sub processors: https://www.workday.com/en-us/legal/subprocessors.html

[to be completed]

continuous

[to be completed]

ZenDesk , Inc.

Support ticketing services for Bain tools

USA

[to be completed]

continuous

[to be completed]

Zoho

[to be completed]

[to be completed]

[to be completed]

continuous

[to be completed]