Enveedo
Third-Party Data Processors
Last Review Date: September 10, 2026
Enveedo, Inc. may engage and use certain third-party data processors (“Sub-Processors”) to provide services to our customers. These Sub-Processors may have access to customer information provided directly by our customers or to which we may have access in order to perform the contracted services or enable requested features related thereto (“Customer Data”).
This page provides important information about the identity, location, and role of each Sub-Processor. Terms used on this page but not defined herein have the meaning set forth in the Software as a Service Agreement between Enveedo and its customers (the “Terms of Service”).
Entity Name
Purpose
Data Processed
Legal Basis
Website and Location
Amazon Web Services, Inc.
Hosts Enveedo's core cloud infrastructure and stores files and attachments (AWS S3), including evidence and policy documents uploaded to the platform.
General contact and identification data of the customer's employees and users processed on the platform, and any personal data contained within uploaded files and evidence (generally limited to basic contact data).
Processing on the customer's documented instructions (Enveedo as processor).
CloudFlare, Inc.
Provides the web application firewall (WAF) that protects the platform, processing access and traffic metadata to detect and prevent threats.
IP addresses, access logs and web traffic metadata (security telemetry) of users interacting with the platform.
Legitimate interest (platform security).
Datadog, Inc.
Infrastructure and application monitoring; collects security and performance telemetry (logs, metrics, traces) to detect anomalies, misconfigurations and availability or performance issues.
Security and system telemetry, which may include IP addresses and access or traffic metadata of platform users. No customer content, files or security findings.
Legitimate interest (platform security).
MongoDB, Inc.
Primary cloud database where the platform stores and retrieves, in real time, the personal data managed by customers.
General contact and identification data of the customer's employees and users (name, corporate email, role, and related records).
Processing on the customer's documented instructions (Enveedo as processor).
Twilio Inc. (Twilio SendGrid)
Email delivery only. Delivers transactional emails, such as access notices and platform notifications (invitations, reminders, approval and questionnaire links, and one-time passwords), over TLS.
Only the recipient's contact data (name and email) needed to deliver the email and its links. No customer security data is sent by email.
Processing on the customer's documented instructions (Enveedo as processor).
HubSpot, Inc.
Customer relationship management (CRM), subscription and billing administration, customer support and relationship management, and handling of customer requests.
Business contact details (name, corporate email, company, phone), billing and payment-related contact data, and the content of communications and requests.
Legitimate interest (finance, legal, support and requests).
Intuit Inc. (QuickBooks)
Accounting and financial management; records expenses, revenues and payment information for invoicing, collections and financial reporting.
Financial records that may include personal data of the customer's billing contacts and of payers or payees (name, contact and billing details, and payment information).
Legitimate interest; legal obligation (accounting and tax record retention).
https://quickbooks.intuit.com
675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, United States.
675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, United States.
Microsoft Corporation
Email service (Microsoft 365 / Outlook) used by Enveedo to communicate with customers and prospective customers and to provide support.
Name and email of the customer's contacts and the content of the email communications.
Legitimate interest (support and communications).
UserGuiding, Inc.
In-app user onboarding and guidance, and analysis of how users interact with the platform in order to improve the product.
Application usage and interaction metadata (for example, features used and time spent in sections) associated with general user identifiers.
Consent (product analytics).
Heap Inc.
Product and user-behavior analytics used to understand how the platform is used and to improve the product.
Application usage and behavior metadata associated with general user identifiers.
Consent (product analytics).
By accepting Enveedo's Terms of Service, customers agree that Enveedo may share Customer Data with Sub-Processors solely for the purpose of fulfilling the contracted services.