Sub-Processors

This page lists the third-party service providers (sub-processors) that Undertone Studio currently uses for hosting, storage, communication, and workflow operations. These partners may process personal data on our behalf. For full legal details, including safeguards and international transfer mechanisms, please refer to the Privacy Policy (Annex 1).

Vercel Inc.

Purpose:

Hosting, deployment, CDN

Location:

EU & US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

IP addresses, access logs, analytics data (if enabled)

Google Drive

Purpose:

Cloud storage, file management

Location:

EU & US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Uploaded files, project assets, documents, images, video files

Notion Labs, Inc.

Purpose:

Project planning, notes, task management

Location:

US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Client names, project details, planning documents

Trello (Atlassian)

Purpose:

Task management & kanban workflow

Location:

US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Project titles, task descriptions, client-related notes

Discord Inc.

Purpose:

Communication & collaboration (text, voice, video)

Location:

US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Usernames, chat logs, IP addresses, shared files

Google Docs & Google Sheets

Purpose:

Online documentation & spreadsheet collaboration

Location:

EU & US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Project notes, scripts, planning documents

Adobe Creative Cloud

Purpose:

Cloud-sync for creative projects

Location:

EU & US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Synced design files, fonts, cloud-render files

Canva

Purpose:

Online design creation & asset management

Location:

US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Uploaded media, design assets, project visuals

Figma Inc.

Purpose:

UI/UX design, prototyping, collaboration

Location:

US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

UI prototypes, uploaded assets, collaboration metadata

WeTransfer

Purpose:

File transfer & delivery

Location:

EU & US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Transfered video files, images, client assets

TransferNow

Purpose:

File delivery & downloads

Location:

EU

Safeguards:

GDPR-compliant EU-only hosting

Categories of data:

Uploaded files, transfer metadata

Formspree

Purpose:

Website form submissions

Location:

US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Form submissions (name, company, email, message)

Google Meet

Purpose:

Online meetings & video calls

Location:

EU & US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Names, email addresses, meeting metadata

Microsoft Teams

Purpose:

Online meetings & communication

Location:

EU & US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

Names, emails, meeting logs

WhatsApp / WhatsApp Web

Purpose:

Client communication

Location:

US / Meta

Safeguards:

End-to-end encryption + Standard Contractual Clauses

Categories of data:

Chat messages, media shared, contact names

Google Analytics

Purpose:

Website analytics

Location:

EU & US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Legal Basis:

Consent (where required)

Categories of data:

IP addresses (anonymized), device data, usage analytics

Vercel Analytics

Purpose:

Privacy-focused website metrics

Location:

EU

Safeguards:

EU-based hosting

Categories of data:

Page views, timing metrics, anonymized visitor data

Cloudflare

Purpose:

CDN, security, DDoS protection, proxying

Location:

EU & US

Safeguards:

Standard Contractual Clauses (2021/914) + Transfer Impact Assessment

Categories of data:

IP addresses, request logs, security events

This overview reflects the sub-processors currently used by Undertone Studio. For the complete legal Annex with all details and obligations, see the Privacy Policy.