We have updated this policy. If you are a new Subscriber, then this policy will be effective as of February 14, 2022. If you are an existing Subscriber, we are providing you with prior notice of these changes which will be effective as of November 30, 2021. For the previous version of this policy, please expand the section below.
What is a Sub-processor
A sub-processor is a third party data processor engaged by Stack Moxie, who has or potentially will have access to or process Service Data (which does not contain our customer’s Personal Data). Stack Moxie engages different types of sub-processors to perform various functions as explained in the tables below.
While the rest of this document discusses our Sub-processors, Stack Moxie does not ingest nor store the Personal Data held by our customer’s integrated systems, therefore Personal Data is not transferred or stored in any of our Sub-processors.
Due Diligence
Stack Moxie undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed sub-processors that will or may have access to or otherwise process Service Data.
Contractual Safeguards
Stack Moxie generally requires its sub-processors to satisfy equivalent obligations as those required from Stack Moxie (as a Data Processor) as set forth in Stack Moxie’s Data Processing Agreement (“DPA”), including but not limited to the requirements to:
- In connection with their sub-processing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws;
- Provide regular training in security and data protection to personnel to whom they grant access to Stack Moxie’s customer data;
- Promptly inform Stack Moxie about any actual or potential security breach; and
Third-party service providers which incidentally have access to your Service Data are used to provide specific features or components of the product outside of the core hosting of Service Data (“Service Specific sub-processors”) are regularly reviewed by Stack Moxie to ensure they work towards implementing each of the standards described in this Section. However, Innovation Service Specific sub-processors may not currently meet all of the measures identified above.
This policy does not give Subscribers any additional rights or remedies and should not be construed as a binding agreement. The information herein is only provided to illustrate Stack Moxie’s engagement process for sub-processors as well as to provide the actual list of third party sub-processors used by Stack Moxie as of the date of this policy (which Stack Moxie may use in the delivery and support of its Services).
Infrastructure Sub-processors – Service Data Storage and Processing
Stack Moxie owns or controls access to the infrastructure that Stack Moxie uses to host and process Service Data submitted to the Services, other than as set forth herein. Currently, the Stack Moxie production systems used for hosting Service Data for the Services are located in co-location facilities in the United States and in the infrastructure sub-processors listed below. Subscriber accounts are typically established in one of these regions based on where the Subscriber is located, but may be shifted among locations to ensure performance and availability of the Services. The following table describes the countries and legal entities engaged by Stack Moxie in the storage of Service Data.
| Entity Name | Entity Type | Entity Country |
| Amazon Web Services, Inc. | Cloud Service Provider | United States, Ireland, Germany, Japan |
| Microsoft Azure | Cloud Service Provider | United States |
Service Specific Sub-processors
Stack Moxie works with certain third parties to provide specific functionality within the Services. These providers are the sub-processors set forth below. In order to provide the relevant functionality these sub-processors access Service Data. Their use is limited to the indicated Services.
| Entity Name | Purpose | Entity Country | |
| Auth0 | Auth0 is used for identity, SSO and sign-on activities. | United States | |
| Mailgun | Mailgun is used to send email notifications to our customers. | United States | |
| Puppeteer | Stack Moxie leverages Puppeteer to analyze customer landing pages. | United States | |
| Amplitude | A third-party analytics provider that Stack Moxie uses to capture how users interact with the Service. | United States | |
| New Relic | New Relic is a third party logging platform that Stack Moxie uses for ingesting, parsing, querying and performing analytics on Service application and infrastructure logs (“Logs”). These Logs are then used for debugging, troubleshooting, auditing, reporting, and detecting and alerting on unexpected application behavior. | United States | |
| Inflection | An email service to provide account reporting and topical information updates. | United States | |
| Selenium | Stack Moxie leverages Selenium to analyze customer landing pages. | United States |
CONTACT US
In order to resolve a complaint regarding Sub-processors or to receive further information regarding use of the Platform, please contact us at:
Stack Moxie Marketing, Inc. LLC
1925 6th Street, Kirkland, WA 98033
(425) 270-7733
[email protected]
Last Updated June 7. 2023
