Subprocessors

Subprocessors and Data Hosting Locations

Tradeshift uses its global entities, as well as third party subprocessors, to assist with the provision of our services.  Tradeshift cloud solutions utilize various data hosting locations around the world.  This document provides information about subprocessors and the regional data storage locations we use for the SaaS services we offer.

What is a Subprocessor?

A subprocessor is a third party engaged by Tradeshift, which has or potentially will have access to, or process personal data of our customers, who are the data controllers of that personal data. Tradeshift uses subprocessors, including Tradeshift global affiliates, to perform various functions detailed below.  Whether a specific subprocessor processes a specific customer’s data will depend on the products to which the customer is subscribed, the country in which the customer is located (or receives or sends documents from) and other factors.

Due Diligence

Tradeshift uses a selection process, which includes rigorous evaluation of the security practices of each subprocessors that may have access to or process Personal Data, and requires each subprocessor to adhere to requirements of data protection law equivalent to those required from Tradeshift (as a Data Processor to our customers).

Tradeshift Authorized Third Party Subprocessors

Tradeshift processes users’ names and their business email addresses for the purposes of sending and receiving business documents. The companies listed below are third parties, not affiliated with Tradeshift, that Tradeshift contracts with to store, access or otherwise process customer data (including personal data) as part of the Tradeshift SaaS services. Tradeshift may also notify or obtain consent to the use of specific subprocessors not listed below in direct agreement with customers.

TRADESHIFT PLATFORM AND TRADESHIFT SAAS CORE SERVICES

NameService TypeData ProcessedProcessing LocationsAdditional Information
Amazon Web Services EMEA SARL
Amazon Web Services, Inc.
Cloud Service provider All types of data stored by Tradeshift platform and SaaS Services Ireland, US (Only for US customers using Tradeshift Link)AWS Security Center
Mailgun Technologies, Inc.620 Folsom St Ste 100. San Francisco , CA94107-3625Product notification email providerUser names and email addressesUnited StatesPrivacy policy
Splunk, Inc.270 Brannan Street,
San Francisco, CA 94107
System LoggingAudit LogsUnited StatesPrivacy policy
Zendesk, Inc.989 Market StreetSan Francisco, CA 94103Support SystemCustomer support contact names, email addresses and communications contentFrankfurtPrivacy policy

REGIONAL ELECTRONIC INVOICING

Subprocessors involved with electronic invoice signatures, archiving, and tax clearance. Use of these depends on whether customer is a buyer or seller and country in which invoice is issued or into which an invoice is sent.  More information can be found here.

NameService TypeData ProcessedProcessing LocationsAdditional Information
Sovos (Trustweaver AB)
Org no 556613
6262Kungsgatan 27SE-111 56 Stockholm, Sweden
https://sovos.com
Outbound (AR)_ ClearanceInvoices and Credit Note for invoices and credit notes issued by Indian taxpayersSwedenPrivacy policy
Inbound (AP) ClearanceDomestic invoices and credit notes issued in Italy, Mexico, Chile, Peru, BrazilInvoices and Credit Note for invoices and credit notes issued by Indian taxpayers Sweden
Digital SignaturesInvoices and Credit Note issued by Indian taxpayersInvoices and Credit Note for invoices and credit notes issued by Indian taxpayers Sweden
Qualified electronic signaturesInvoices and Credit Note issued from or to French taxpayers, incl. the French overseas territoriesInvoices and Credit Note for invoices and credit notes issued by Indian taxpayers Sweden
e-ArchivingSupport for optional invoice archiving services for buyers in certain countries.Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers Sweden
Sovos Compliance Desenvolvimento de Sistemas Ltda
Alameda Rio Negro, 161, room 1301
Alphaville, Barueri, São Paulo, Brazil
06-454-000
https://sovos.com
Inbound (AP) clearanceFor domestic invoices and credit notes issued in BrazilBrazil Privacy policy
Inposia
Ottostraße 18D-76227 Karlsruhe
Germany
https://www.inposia.com/
Inbound (AP) ClearanceDomestic invoices and credit notes issued in Turkey TurkeyPrivacy policy
Signature South Consulting Costa Rica S.A. (GoSocket)
CJ 3-101-595167, Oficentro Plaza Colonial
Oficina 2-11A.
Escazú, San José, Costa Rica
Inbound (AP) ClearanceDomestic invoices and credit notes issued in Chile, Costa RicaChile Privacy policy
Edicom Capital, S.L.
Calle Charles Robert Darwin, 8 Parque Tecnologico de Paterna
46980 Paterna
Valencia, Spain
Inbound (AP) ClearanceDomestic invoices and credit notes issued in ColombiaSpain Privacy policy
Baiwang
Beijing, China
Outbound (AR) Clearance; 
Inbound (AP) Clearance
Paper VAT invoices and credit notes issued by Chinese taxpayers; Domestic invoices and credit notes issued in ChinaChinaPrivacy policy

Other Subprocessors

NameService TypeData ProcessedProcessing LocationsAdditional Information
Canon Business Process Services, Inc.
261 Madison Avenue, 3rd Floor
New York, New York 10016
Invoice ScanningInvoice and Credit Memo documents2 processing centers in the United States and 2 in the Philippines.Privacy policy
Canon Europe Ltd
3 The Square, Hayes
Uxbridge UB11 1ET
United Kingdom
Invoice ScanningInvoice and Credit Memo documents2 processing centers in France, 1 in the Czech Republic, and 1 in the Philippines. Privacy policy
Conduent Business Services, LLC
100 Campus Drive, Suite 200
Florham Park, New Jersey 07932 
Invoice scanning services; Seller integration servicesInvoice and credit memo documents; Platform account administration dataUSA, IndiaPrivacy policy
Domo
772 E Utah Valley Dr
American Fork, UT 84003
Data analysisBusiness data analyticsUSA Privacy policy
Google
1600 Amphitheatre Pkwy
Mountain View, CA 94043
Corporate email communication;
Page usage analytics in product;  
Customer contact email and other data exchanged with teams for set-up and implementation projects; Analytics services;
IP address/Cookie - Customer users can opt-out of cookies to avoid the Google Analytics based processing;
USAPrivacy policy
Marketo, an Adobe company
901 Mariners Island Blvd #500
San Mateo, CA, US
Email communication systemUser email addresses for product notificationsUSAPrivacy policy
Salesforce
Salesforce Tower
415 Mission Street, 3rd Floor
San Francisco, CA 94105
CRM SaaS Services and Middleware (Mulesoft)Some seller-related onboarding data is processed using the Salesforce service - which may include a business contact information for individuals. Transaction data is not processed on this service. Germany, France Privacy policy
Fexle
612, Okay Plus, Sector-7, Madhyam Marg
Mansarovar, Jaipur, Rajasthan 302020
India
CRM and email systems Consulting ServicesSome seller-related onboarding data is processed using the CRM and email services for which Fexle provides administration and expert use services  - this may include a business contact information for individuals. Transaction data is not processed on these services. IndiaPrivacy policy
IT Goals
Namaa Building 5th floor, Emtedad Ramses 6th District
Nasr City, Cairo, Egypt
Support for Tradeshift Babelway servicesDocuments in need of support during processing via Babelway / Tradeshift Link integrationsEgypt

Subprocessors related to the IBX products

NameService TypeData ProcessedProcessing LocationsAdditional Information
Hiranyagarbha Consultancy
#76, 2nd Cross, Venkateshwara Nagar, Sampigehalli, Yelahanka Hobli
Bengaluru 560064 India
Professional Services and Software development SAP SRMCustomer's employees and their associated data, such as names, contact details, employee number, organizational affiliation, locationIndia Privacy policy
Capgemini
Paris Head Office
Place de l'Étoile
11 rue de Tilsitt
75017 Paris, France
+33 1 47 54 50 00
Professional Services SAP SRM (Basis)Customer's employees and their associated data, such as names, contact details, employee number, organizational affiliation, locationIndia Privacy policy
https://www.capgemini.com/privacy-policy/
rinf.tech
​Green Court, 4C Gara Herastrau Street, Building B, 3rd Floor
Bucharest, Romania
District 2
+40 374 400 731​​
Software development, Quality assuranceThe Customer's employees and their associated data, such as names, contact details, employee number, organizational affiliation, locationRomania Privacy policy
https://www.rinf.tech/terms-conditions//
Tradeshift Global Entities (see below)Professional services, Software development, Service Desk support, Software SupportThe Customer's employees and their associated data, such as names, contact details, employee number, organizational affiliation, locationRomania, Sweden, Malaysia
Amazon Web Services
EMEA SARL Amazon Web Services, Inc.
Infrastructure hostingThe Customer's employees and their associated data, such as names, contact details, employee number, organizational affiliation, locationSwedenPrivacy policy
AWS Security Center https://aws.amazon.com/security/

Tradeshift Global Entities

Tradeshift operates various global corporate entities. As part of providing our services and support, your personal information may be processed by any one of these entities:

Tradeshift Corporate Affiliate Country
Tradeshift Holdings, Inc.United States
Tradeshift Inc.United States
Tradeshift FG LLCUnited States
Tradeshift SABelgium
Tradeshift Belgium SA (formerly Babelway SA)Belgium
Tradeshift AB (formerly IBX Group AB)Sweden
Tradeshift ApSDenmark
Tradeshift SASFrance
Tradeshift Japan, Inc.Japan
Tradeshift Network Ltd.United Kingdom
Tradeshift Pty LtdAustralia
Tradeshift QFZ LLC d/b/a Tradeshift QFZQatar
Tradeshift Sdn.BhdMalaysia
Tradeshift Technology SRLRomania
Tradeshift Asia Holdings LtdPeople’s Republic of China (Hong Kong)
Tradeshift China LtdPeople’s Republic of China (Shanghai)

Optional Integrations

There are other third parties we partner with to offer optional integrations with our products. These third parties are engaged directly by you. No information is shared with any of these entities unless you choose to enable any of their integrations. The privacy policies applicable to these integrated services varies. Tradeshift is not responsible for the content of the privacy policies of the third parties who offer integrations. You can enable or disable these integrations in your account at any time.

Receiving Updates about Subprocessors

As the services we offer grow and evolve, the Subprocessors we utilize may also change. We will endeavor to provide prompt updates through this page, and product release announcements, as applicable, as new Subprocessors are added or existing ones are removed.

To add your email address to our Subprocessor notification list, please provide your name, business email address and the name of the Tradeshift customer that you represent here ⇒  ADD ME TO UPDATE LIST  

Only existing Tradeshift customers are entitled to this information, so please list accurate customer name.  This information will be stored solely to provide these updates and according to the Tradeshift Web Site Privacy Policy:  

Where your data is stored by Tradeshift

Tradeshift ProductIrelandBelgiumSwedenUS
Tradeshift Platform
Tradeshift Pay
Tradeshift Buy
Tradeshift Go
Tradeshift Cash
Tradeshift Link
Tradeshift Babelway
IBX

Notes:

§ Tradeshift Subprocessors may utilize additional locations as specified in the list above

§ US storage of data for Tradeshift Link and Babelway is only for US based customers

§ Tradeshift SaaS Software operated in China is not addressed in this document

§ Third Party SaaS Products and Apps which are distributed by Tradeshift may use other hosting locations as specified in the subscription agreement for that service

LOG OF UPDATES TO THIS PAGE:

10-28-2021  We re-organized the page to provide more consistent information about each Subprocessor including data processing location, added the option for a person to receive subprocessor updates, removed entities that are service providers to Tradeshift as a controller of personal data but are not a subprocessor with regard to the Tradeshift SaaS Products, and directly added the list of e-invoicing service providers.  We also added subprocessors regarding the Tradeshift Babelway services which had been on a separate list. Some subprocessors were added as they are commonly used and best disclosed on this page rather than just in agreements with our customers.

Last Updated: 10-28-2021