Subprocessors and Data Hosting Locations

Tradeshift uses its global entities, as well as third party subprocessors, to assist with the provision of our services.  Tradeshift cloud solutions utilize various data hosting locations around the world.  This document provides information about subprocessors and the regional data storage locations we use for the SaaS services we offer.

What is a Subprocessor?

A subprocessor is a third party engaged by Tradeshift, which has or potentially will have access to, or process personal data of our customers, who are the data controllers of that personal data. Tradeshift uses subprocessors, including Tradeshift global affiliates, to perform various functions detailed below.  Whether a specific subprocessor processes a specific customer’s data will depend on the products to which the customer is subscribed, the country in which the customer is located (or receives or sends documents from) and other factors.

Due Diligence

Tradeshift uses a selection process, which includes rigorous evaluation of the security practices of each subprocessors that may have access to or process Personal Data, and requires each subprocessor to adhere to requirements of data protection law equivalent to those required from Tradeshift (as a Data Processor to our customers).

Tradeshift Authorized Third Party Subprocessors

Tradeshift processes users’ names and their business email addresses for the purposes of sending and receiving business documents. The companies listed below are third parties, not affiliated with Tradeshift, that Tradeshift contracts with to store, access or otherwise process customer data (including personal data) as part of the Tradeshift SaaS services. Tradeshift may also notify or obtain consent to the use of specific subprocessors not listed below in direct agreement with customers.

TRADESHIFT PLATFORM AND TRADESHIFT SAAS CORE SERVICES

REGIONAL ELECTRONIC INVOICING

Subprocessors involved with electronic invoice signatures, archiving, and tax clearance. Use of these depends on whether customer is a buyer or seller and country in which invoice is issued or into which an invoice is sent.  More information can be found here.

Other Subprocessors

Subprocessors related to the IBX products

Tradeshift Global Entities

Tradeshift operates various global corporate entities. As part of providing our services and support, your personal information may be processed by any one of these entities:

Optional Integrations

There are other third parties we partner with to offer optional integrations with our products. These third parties are engaged directly by you. No information is shared with any of these entities unless you choose to enable any of their integrations. The privacy policies applicable to these integrated services varies. Tradeshift is not responsible for the content of the privacy policies of the third parties who offer integrations. You can enable or disable these integrations in your account at any time.

Receiving Updates about Subprocessors

As the services we offer grow and evolve, the Subprocessors we utilize may also change. We will endeavor to provide prompt updates through this page, and product release announcements, as applicable, as new Subprocessors are added or existing ones are removed.

To add your email address to our Subprocessor notification list, please provide your name, business email address and the name of the Tradeshift customer that you represent here ⇒  ADD ME TO UPDATE LIST  

Only existing Tradeshift customers are entitled to this information, so please list accurate customer name.  This information will be stored solely to provide these updates and according to the Tradeshift Web Site Privacy Policy:  

Where your data is stored by Tradeshift

Notes:

§ Tradeshift Subprocessors may utilize additional locations as specified in the list above

§ US storage of data for Tradeshift Link and Babelway is only for US based customers

§ Tradeshift SaaS Software operated in China is not addressed in this document

§ Third Party SaaS Products and Apps which are distributed by Tradeshift may use other hosting locations as specified in the subscription agreement for that service

LOG OF UPDATES TO THIS PAGE:

10-28-2021  We re-organized the page to provide more consistent information about each Subprocessor including data processing location, added the option for a person to receive subprocessor updates, removed entities that are service providers to Tradeshift as a controller of personal data but are not a subprocessor with regard to the Tradeshift SaaS Products, and directly added the list of e-invoicing service providers.  We also added subprocessors regarding the Tradeshift Babelway services which had been on a separate list. Some subprocessors were added as they are commonly used and best disclosed on this page rather than just in agreements with our customers.

Last Updated: 10-28-2021