Subprocessors
Subprocessors and Data Hosting Locations
Tradeshift uses its global entities, as well as third party subprocessors, to assist with the provision of our services. Tradeshift cloud solutions utilize various data hosting locations around the world. This document provides information about subprocessors and the regional data storage locations we use for the SaaS services we offer.
What is a Subprocessor?
A subprocessor is a third party engaged by Tradeshift, which has or potentially will have access to, or process personal data of our customers, who are the data controllers of that personal data. Tradeshift uses subprocessors, including Tradeshift global affiliates, to perform various functions detailed below. Whether a specific subprocessor processes a specific customer’s data will depend on the products to which the customer is subscribed, the country in which the customer is located (or receives or sends documents from) and other factors.
Due Diligence
Tradeshift uses a selection process, which includes rigorous evaluation of the security practices of each subprocessors that may have access to or process Personal Data, and requires each subprocessor to adhere to requirements of data protection law equivalent to those required from Tradeshift (as a Data Processor to our customers).
Tradeshift Authorized Third Party Subprocessors
Tradeshift processes users’ names and their business email addresses for the purposes of sending and receiving business documents. The companies listed below are third parties, not affiliated with Tradeshift, that Tradeshift contracts with to store, access or otherwise process customer data (including personal data) as part of the Tradeshift SaaS services. Tradeshift may also notify or obtain consent to the use of specific subprocessors not listed below in direct agreement with customers.
TRADESHIFT PLATFORM AND TRADESHIFT SAAS CORE SERVICES
| Name | Service Type | Data Processed | Processing Locations | Additional Information |
| Amazon Web Services EMEA SARL Amazon Web Services, Inc. |
Cloud Service provider | All types of data stored by Tradeshift platform and SaaS Services | Ireland, US (Only for US customers using Tradeshift Link) | AWS Security Center |
| Mailgun Technologies, Inc.620 Folsom St Ste 100. San Francisco , CA94107-3625 | Product notification email provider | User names and email addresses | United States | Privacy policy |
| Splunk, Inc.270 Brannan Street, San Francisco, CA 94107 |
System Logging | Audit Logs | United States | Privacy policy |
| Zendesk, Inc.989 Market StreetSan Francisco, CA 94103 | Support System | Customer support contact names, email addresses and communications content | Frankfurt | Privacy policy |
| Pendo.io 301 Hillsborough Street Raleigh, NC 27603 |
Product experience platform | User names and identifiers, device information, usage activity information | United States | Privacy policy |
| Datadog, Inc. 620 8th Avenue 45th Floor New York, NY 10018-1741 |
Cloud-based monitoring and analytics | User names and identifiers, IP Addresses, device information, activity logs and performance data | United States | Privacy policy |
REGIONAL ELECTRONIC INVOICING
Subprocessors involved with electronic invoice signatures, archiving, and tax clearance. Use of these depends on whether customer is a buyer or seller and country in which invoice is issued or into which an invoice is sent. More information can be found here.
| Name | Service Type | Data Processed | Processing Locations | Additional Information |
| Sovos (Trustweaver AB) Org no 556613 6262Kungsgatan 27SE-111 56 Stockholm, Sweden https://sovos.com |
Outbound (AR)_ Clearance | Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers | Sweden | Privacy policy |
| Inbound (AP) Clearance | Domestic invoices and credit notes issued in Italy, Mexico, Chile, Peru, Brazil | Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers | Sweden | |
| Digital Signatures | Invoices and Credit Note issued by Indian taxpayers | Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers | Sweden | |
| Qualified electronic signatures | Invoices and Credit Note issued from or to French taxpayers, incl. the French overseas territories | Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers | Sweden | |
| e-Archiving | Support for optional invoice archiving services for buyers in certain countries. | Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers | Sweden | |
| Sovos Compliance Desenvolvimento de Sistemas Ltda Alameda Rio Negro, 161, room 1301 Alphaville, Barueri, São Paulo, Brazil 06-454-000 https://sovos.com |
Inbound (AP) clearance | For domestic invoices and credit notes issued in Brazil | Brazil | Privacy policy |
| Inposia Ottostraße 18D-76227 Karlsruhe Germany https://www.inposia.com/ |
Inbound (AP) Clearance | Domestic invoices and credit notes issued in Turkey | Turkey | Privacy policy |
| Signature South Consulting Costa Rica S.A. (GoSocket) CJ 3-101-595167, Oficentro Plaza Colonial Oficina 2-11A. Escazú, San José, Costa Rica |
Inbound (AP) Clearance | Domestic invoices and credit notes issued in Chile, Costa Rica | Chile | Privacy policy |
| Edicom Capital, S.L. Calle Charles Robert Darwin, 8 Parque Tecnologico de Paterna 46980 Paterna Valencia, Spain |
Inbound (AP) Clearance | Domestic invoices and credit notes issued in Colombia | Spain | Privacy policy |
| Baiwang Beijing, China |
Outbound (AR) Clearance; Inbound (AP) Clearance |
Paper VAT invoices and credit notes issued by Chinese taxpayers; Domestic invoices and credit notes issued in China | China | Privacy policy |
| Kingxunlian Floor 12/16, Building No. 9, Yulang West Park, Xicheng District, Beijing |
Outbound (AR) Clearance; Inbound (AP) Clearance |
Paper VAT invoices and credit notes issued by Chinese taxpayers; Domestic invoices and credit notes issued in China | China | Privacy policy |
Other Subprocessors
| Name | Service Type | Data Processed | Processing Locations | Additional Information |
| Canon Business Process Services, Inc. 261 Madison Avenue, 3rd Floor New York, New York 10016 |
Invoice Scanning | Invoice and Credit Memo documents | 2 processing centers in the United States and 2 in the Philippines. | Privacy policy |
| Canon Europe Ltd 3 The Square, Hayes Uxbridge UB11 1ET United Kingdom |
Invoice Scanning | Invoice and Credit Memo documents | 2 processing centers in France, 1 in the Czech Republic, and 1 in the Philippines. | Privacy policy |
| Conduent Business Services, LLC 100 Campus Drive, Suite 200 Florham Park, New Jersey 07932 |
Invoice scanning services; Seller integration services | Invoice and credit memo documents; Platform account administration data | USA, India | Privacy policy |
| Domo 772 E Utah Valley Dr American Fork, UT 84003 |
Data analysis | Business data analytics | USA | Privacy policy |
| Google 1600 Amphitheatre Pkwy Mountain View, CA 94043 |
Corporate email communication; Page usage analytics in product; |
Customer contact email and other data exchanged with teams for set-up and implementation projects; Analytics services; IP address/Cookie – Customer users can opt-out of cookies to avoid the Google Analytics based processing; |
USA | Privacy policy |
| Marketo, an Adobe company 901 Mariners Island Blvd #500 San Mateo, CA, US |
Email communication system | User email addresses for product notifications | USA | Privacy policy |
| Salesforce Salesforce Tower 415 Mission Street, 3rd Floor San Francisco, CA 94108 |
CRM SaaS Services and Middleware (Mulesoft) | Some seller-related onboarding data is processed using the Salesforce service – which may include a business contact information for individuals. Transaction data is not processed on this service. | Germany, France | Privacy policy |
| Fexle 612, Okay Plus, Sector-7, Madhyam Marg Mansarovar, Jaipur, Rajasthan 302020 India |
CRM and email systems Consulting Services | Some seller-related onboarding data is processed using the CRM and email services for which Fexle provides administration and expert use services – this may include a business contact information for individuals. Transaction data is not processed on these services. | India | Privacy policy |
| IT Goals Namaa Building 5th floor, Emtedad Ramses 6th District Nasr City, Cairo, Egypt |
Support for Tradeshift Babelway services | Documents in need of support during processing via Babelway / Tradeshift Link integrations | Egypt |
Subprocessors related to the IBX products
| Name | Service Type | Data Processed | Processing Locations | Additional Information |
| Hiranyagarbha Consultancy #76, 2nd Cross, Venkateshwara Nagar, Sampigehalli, Yelahanka Hobli Bengaluru 560064 India |
Professional Services and Software development SAP SRM | Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location | India | Privacy policy |
| Capgemini Paris Head Office Place de l’Étoile 11 rue de Tilsitt 75017 Paris, France +33 1 47 54 50 00 |
Professional Services SAP SRM (Basis) | Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location | India | Privacy policy https://www.capgemini.com/privacy-policy/ |
| rinf.tech Green Court, 4C Gara Herastrau Street, Building B, 3rd Floor Bucharest, Romania District 2 +40 374 400 731 |
Software development, Quality assurance | The Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location | Romania | Privacy policy https://www.rinf.tech/terms-conditions// |
| Tradeshift Global Entities (see below) | Professional services, Software development, Service Desk support, Software Support | The Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location | Romania, Sweden, Malaysia | |
| Amazon Web Services EMEA SARL Amazon Web Services, Inc. |
Infrastructure hosting | The Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location | Sweden | Privacy policy AWS Security Center https://aws.amazon.com/security/ |
Tradeshift Global Entities
Tradeshift operates various global corporate entities. As part of providing our services and support, your personal information may be processed by any one of these entities:
| Tradeshift Corporate Affiliate | Country |
| Tradeshift Holdings, Inc. | United States |
| Tradeshift Inc. | United States |
| Tradeshift FG LLC | United States |
| Tradeshift SA | Belgium |
| Tradeshift Belgium SA (formerly Babelway SA) | Belgium |
| Tradeshift AB (formerly IBX Group AB) | Sweden |
| Tradeshift ApS | Denmark |
| Tradeshift SAS | France |
| Tradeshift Japan, Inc. | Japan |
| Tradeshift Network Ltd. | United Kingdom |
| Tradeshift Pty Ltd | Australia |
| Tradeshift QFZ LLC d/b/a Tradeshift QFZ | Qatar |
| Tradeshift Sdn.Bhd | Malaysia |
| Tradeshift Technology SRL | Romania |
| Tradeshift Asia Holdings Ltd | People’s Republic of China (Hong Kong) |
| Tradeshift China Ltd | People’s Republic of China (Shanghai) |
Optional Integrations
There are other third parties we partner with to offer optional integrations with our products. These third parties are engaged directly by you. No information is shared with any of these entities unless you choose to enable any of their integrations. The privacy policies applicable to these integrated services varies. Tradeshift is not responsible for the content of the privacy policies of the third parties who offer integrations. You can enable or disable these integrations in your account at any time.
Receiving Updates about Subprocessors
As the services we offer grow and evolve, the Subprocessors we utilize may also change. We will endeavor to provide prompt updates through this page, and product release announcements, as applicable, as new Subprocessors are added or existing ones are removed.
To add your email address to our Subprocessor notification list, please provide your name, business email address and the name of the Tradeshift customer that you represent here ⇒ ADD ME TO UPDATE LIST
Only existing Tradeshift customers are entitled to this information, so please list accurate customer name. This information will be stored solely to provide these updates and according to the Tradeshift Web Site Privacy Policy:
Where your data is stored by Tradeshift
| Tradeshift Product | Ireland | Belgium | Sweden | US |
| Tradeshift Platform | ✔ | |||
| Tradeshift Pay | ✔ | |||
| Tradeshift Buy | ✔ | |||
| Tradeshift Go | ✔ | |||
| Tradeshift Cash | ✔ | |||
| Tradeshift Link | ✔ | ✔ | ✔ | |
| Tradeshift Babelway | ✔ | ✔ | ✔ | |
| IBX | ✔ |
Notes:
§ Tradeshift Subprocessors may utilize additional locations as specified in the list above
§ US storage of data for Tradeshift Link and Babelway is only for US based customers
§ Tradeshift SaaS Software operated in China is not addressed in this document
§ Third Party SaaS Products and Apps which are distributed by Tradeshift may use other hosting locations as specified in the subscription agreement for that service
LOG OF UPDATES TO THIS PAGE:
10-28-2021 We re-organized the page to provide more consistent information about each Subprocessor including data processing location, added the option for a person to receive subprocessor updates, removed entities that are service providers to Tradeshift as a controller of personal data but are not a subprocessor with regard to the Tradeshift SaaS Products, and directly added the list of e-invoicing service providers. We also added subprocessors regarding the Tradeshift Babelway services which had been on a separate list. Some subprocessors were added as they are commonly used and best disclosed on this page rather than just in agreements with our customers.
Last Updated: 10-28-2021