Subprocessors

Subprocessors and Data Hosting Locations

Tradeshift uses its global entities, as well as third party subprocessors, to assist with the provision of our services.  Tradeshift cloud solutions utilize various data hosting locations around the world.  This document provides information about subprocessors and the regional data storage locations we use for the SaaS services we offer.

What is a Subprocessor?

A subprocessor is a third party engaged by Tradeshift, which has or potentially will have access to, or process personal data of our customers, who are the data controllers of that personal data. Tradeshift uses subprocessors, including Tradeshift global affiliates, to perform various functions detailed below.  Whether a specific subprocessor processes a specific customer’s data will depend on the products to which the customer is subscribed, the country in which the customer is located (or receives or sends documents from) and other factors.

Due Diligence

Tradeshift uses a selection process, which includes rigorous evaluation of the security practices of each subprocessors that may have access to or process Personal Data, and requires each subprocessor to adhere to requirements of data protection law equivalent to those required from Tradeshift (as a Data Processor to our customers).

Tradeshift Authorized Third Party Subprocessors

Tradeshift processes users’ names and their business email addresses for the purposes of sending and receiving business documents. The companies listed below are third parties, not affiliated with Tradeshift, that Tradeshift contracts with to store, access or otherwise process customer data (including personal data) as part of the Tradeshift SaaS services. Tradeshift may also notify or obtain consent to the use of specific subprocessors not listed below in direct agreement with customers.

TRADESHIFT PLATFORM AND TRADESHIFT SAAS CORE SERVICES

Name Service Type Data Processed Processing Locations Additional Information
Amazon Web Services EMEA SARL
Amazon Web Services, Inc.
Cloud Service provider All types of data stored by Tradeshift platform and SaaS Services Ireland, US (Only for US customers using Tradeshift Link) AWS Security Center
Mailgun Technologies, Inc.620 Folsom St Ste 100. San Francisco , CA94107-3625 Product notification email provider User names and email addresses United States Privacy policy
Splunk, Inc.270 Brannan Street,
San Francisco, CA 94107
System Logging Audit Logs United States Privacy policy
Zendesk, Inc.989 Market StreetSan Francisco, CA 94103 Support System Customer support contact names, email addresses and communications content Frankfurt Privacy policy

REGIONAL ELECTRONIC INVOICING

Subprocessors involved with electronic invoice signatures, archiving, and tax clearance. Use of these depends on whether customer is a buyer or seller and country in which invoice is issued or into which an invoice is sent.  More information can be found here.

Name Service Type Data Processed Processing Locations Additional Information
Sovos (Trustweaver AB)
Org no 556613
6262Kungsgatan 27SE-111 56 Stockholm, Sweden
https://sovos.com
Outbound (AR)_ Clearance Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers Sweden Privacy policy
Inbound (AP) Clearance Domestic invoices and credit notes issued in Italy, Mexico, Chile, Peru, Brazil Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers Sweden
Digital Signatures Invoices and Credit Note issued by Indian taxpayers Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers Sweden
Qualified electronic signatures Invoices and Credit Note issued from or to French taxpayers, incl. the French overseas territories Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers Sweden
e-Archiving Support for optional invoice archiving services for buyers in certain countries. Invoices and Credit Note for invoices and credit notes issued by Indian taxpayers Sweden
Sovos Compliance Desenvolvimento de Sistemas Ltda
Alameda Rio Negro, 161, room 1301
Alphaville, Barueri, São Paulo, Brazil
06-454-000
https://sovos.com
Inbound (AP) clearance For domestic invoices and credit notes issued in Brazil Brazil Privacy policy
Inposia
Ottostraße 18D-76227 Karlsruhe
Germany
https://www.inposia.com/
Inbound (AP) Clearance Domestic invoices and credit notes issued in Turkey Turkey Privacy policy
Signature South Consulting Costa Rica S.A. (GoSocket)
CJ 3-101-595167, Oficentro Plaza Colonial
Oficina 2-11A.
Escazú, San José, Costa Rica
Inbound (AP) Clearance Domestic invoices and credit notes issued in Chile, Costa Rica Chile Privacy policy
Edicom Capital, S.L.
Calle Charles Robert Darwin, 8 Parque Tecnologico de Paterna
46980 Paterna
Valencia, Spain
Inbound (AP) Clearance Domestic invoices and credit notes issued in Colombia Spain Privacy policy
Baiwang
Beijing, China
Outbound (AR) Clearance;
Inbound (AP) Clearance
Paper VAT invoices and credit notes issued by Chinese taxpayers; Domestic invoices and credit notes issued in China China Privacy policy
Kingxunlian
Floor 12/16, Building No. 9, Yulang West Park, Xicheng District, Beijing
Outbound (AR) Clearance;
Inbound (AP) Clearance
Paper VAT invoices and credit notes issued by Chinese taxpayers; Domestic invoices and credit notes issued in China China Privacy policy

Other Subprocessors

Name Service Type Data Processed Processing Locations Additional Information
Canon Business Process Services, Inc.
261 Madison Avenue, 3rd Floor
New York, New York 10016
Invoice Scanning Invoice and Credit Memo documents 2 processing centers in the United States and 2 in the Philippines. Privacy policy
Canon Europe Ltd
3 The Square, Hayes
Uxbridge UB11 1ET
United Kingdom
Invoice Scanning Invoice and Credit Memo documents 2 processing centers in France, 1 in the Czech Republic, and 1 in the Philippines. Privacy policy
Conduent Business Services, LLC
100 Campus Drive, Suite 200
Florham Park, New Jersey 07932
Invoice scanning services; Seller integration services Invoice and credit memo documents; Platform account administration data USA, India Privacy policy
Domo
772 E Utah Valley Dr
American Fork, UT 84003
Data analysis Business data analytics USA Privacy policy
Google
1600 Amphitheatre Pkwy
Mountain View, CA 94043
Corporate email communication;
Page usage analytics in product;
Customer contact email and other data exchanged with teams for set-up and implementation projects; Analytics services;
IP address/Cookie – Customer users can opt-out of cookies to avoid the Google Analytics based processing;
USA Privacy policy
Marketo, an Adobe company
901 Mariners Island Blvd #500
San Mateo, CA, US
Email communication system User email addresses for product notifications USA Privacy policy
Salesforce
Salesforce Tower
415 Mission Street, 3rd Floor
San Francisco, CA 94108
CRM SaaS Services and Middleware (Mulesoft) Some seller-related onboarding data is processed using the Salesforce service – which may include a business contact information for individuals. Transaction data is not processed on this service. Germany, France Privacy policy
Fexle
612, Okay Plus, Sector-7, Madhyam Marg
Mansarovar, Jaipur, Rajasthan 302020
India
CRM and email systems Consulting Services Some seller-related onboarding data is processed using the CRM and email services for which Fexle provides administration and expert use services  – this may include a business contact information for individuals. Transaction data is not processed on these services. India Privacy policy
IT Goals
Namaa Building 5th floor, Emtedad Ramses 6th District
Nasr City, Cairo, Egypt
Support for Tradeshift Babelway services Documents in need of support during processing via Babelway / Tradeshift Link integrations Egypt

Subprocessors related to the IBX products

Name Service Type Data Processed Processing Locations Additional Information
Hiranyagarbha Consultancy
#76, 2nd Cross, Venkateshwara Nagar, Sampigehalli, Yelahanka Hobli
Bengaluru 560064 India
Professional Services and Software development SAP SRM Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location India Privacy policy
Capgemini
Paris Head Office
Place de l’Étoile
11 rue de Tilsitt
75017 Paris, France
+33 1 47 54 50 00
Professional Services SAP SRM (Basis) Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location India Privacy policy
https://www.capgemini.com/privacy-policy/
rinf.tech
​Green Court, 4C Gara Herastrau Street, Building B, 3rd Floor
Bucharest, Romania
District 2
+40 374 400 731​​
Software development, Quality assurance The Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location Romania Privacy policy
https://www.rinf.tech/terms-conditions//
Tradeshift Global Entities (see below) Professional services, Software development, Service Desk support, Software Support The Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location Romania, Sweden, Malaysia
Amazon Web Services
EMEA SARL Amazon Web Services, Inc.
Infrastructure hosting The Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, location Sweden Privacy policy
AWS Security Center https://aws.amazon.com/security/

Tradeshift Global Entities

Tradeshift operates various global corporate entities. As part of providing our services and support, your personal information may be processed by any one of these entities:

Tradeshift Corporate Affiliate  Country
Tradeshift Holdings, Inc. United States
Tradeshift Inc. United States
Tradeshift FG LLC United States
Tradeshift SA Belgium
Tradeshift Belgium SA (formerly Babelway SA) Belgium
Tradeshift AB (formerly IBX Group AB) Sweden
Tradeshift ApS Denmark
Tradeshift SAS France
Tradeshift Japan, Inc. Japan
Tradeshift Network Ltd. United Kingdom
Tradeshift Pty Ltd Australia
Tradeshift QFZ LLC d/b/a Tradeshift QFZ Qatar
Tradeshift Sdn.Bhd Malaysia
Tradeshift Technology SRL Romania
Tradeshift Asia Holdings Ltd People’s Republic of China (Hong Kong)
Tradeshift China Ltd People’s Republic of China (Shanghai)

Optional Integrations

There are other third parties we partner with to offer optional integrations with our products. These third parties are engaged directly by you. No information is shared with any of these entities unless you choose to enable any of their integrations. The privacy policies applicable to these integrated services varies. Tradeshift is not responsible for the content of the privacy policies of the third parties who offer integrations. You can enable or disable these integrations in your account at any time.

Receiving Updates about Subprocessors

As the services we offer grow and evolve, the Subprocessors we utilize may also change. We will endeavor to provide prompt updates through this page, and product release announcements, as applicable, as new Subprocessors are added or existing ones are removed.

To add your email address to our Subprocessor notification list, please provide your name, business email address and the name of the Tradeshift customer that you represent here ⇒  ADD ME TO UPDATE LIST

Only existing Tradeshift customers are entitled to this information, so please list accurate customer name.  This information will be stored solely to provide these updates and according to the Tradeshift Web Site Privacy Policy:

Where your data is stored by Tradeshift

Tradeshift Product Ireland Belgium Sweden US
Tradeshift Platform
Tradeshift Pay
Tradeshift Buy
Tradeshift Go
Tradeshift Cash
Tradeshift Link
Tradeshift Babelway
IBX

Notes:

§ Tradeshift Subprocessors may utilize additional locations as specified in the list above

§ US storage of data for Tradeshift Link and Babelway is only for US based customers

§ Tradeshift SaaS Software operated in China is not addressed in this document

§ Third Party SaaS Products and Apps which are distributed by Tradeshift may use other hosting locations as specified in the subscription agreement for that service

LOG OF UPDATES TO THIS PAGE:

10-28-2021  We re-organized the page to provide more consistent information about each Subprocessor including data processing location, added the option for a person to receive subprocessor updates, removed entities that are service providers to Tradeshift as a controller of personal data but are not a subprocessor with regard to the Tradeshift SaaS Products, and directly added the list of e-invoicing service providers.  We also added subprocessors regarding the Tradeshift Babelway services which had been on a separate list. Some subprocessors were added as they are commonly used and best disclosed on this page rather than just in agreements with our customers.

Last Updated: 10-28-2021