Vinyl Subprocessor List

Introduction

Vinyl is committed to transparency regarding how we process your data. This page lists the third-party subprocessors we use to deliver our services. A subprocessor is a third-party data processor who has access to personal data of our customers and their end-users in order to provide specific services.

We carefully select and continuously monitor our subprocessors to ensure they maintain appropriate security and privacy standards. All subprocessors have entered into appropriate data processing agreements with Vinyl that ensure they provide at least the same level of privacy and security protection as specified in our Privacy Policy and Terms of Service.

Current Subprocessors

Infrastructure and Hosting

AI Processing and Analysis

Business Operations

Security and Compliance

All subprocessors are required to maintain:

1. Comprehensive security programs aligned with industry standards

2. Data encryption for data in transit and at rest

3. Access controls to ensure data is only accessible to authorized personnel

4. Regular security assessments including penetration testing

5. Business continuity and disaster recovery plans

6. Employee security awareness training

Updates to Subprocessors

We may update this list from time to time as we add or remove subprocessors. For customers with a Data Processing Agreement (DPA), we will provide notice of new subprocessors in accordance with the notification terms in the DPA.

If you have questions or concerns about our subprocessors, please contact us at hello@usevinyl.com.

International Data Transfers

Where subprocessors are located outside of the European Economic Area (EEA), Australia, or the customer's jurisdiction, we ensure appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards include:

1. Ensuring subprocessors are located in countries with adequate data protection determinations

2. Implementing Standard Contractual Clauses (SCCs) approved by the European Commission

3. Requiring subprocessors to maintain appropriate security certifications

Subprocessor Due Diligence

Before engaging any new subprocessor, Vinyl conducts thorough due diligence to evaluate their security, privacy, and compliance posture. This includes:

1. Review of security documentation and certifications

2. Assessment of data protection practices

3. Contractual safeguards including data processing terms

4. Ongoing monitoring for compliance

For enterprise customers requiring additional information about specific subprocessors for compliance purposes, please contact hello@usevinyl.com.