Futurae Subprocessor List

Data processing activities: Various activities including sending push notifications. This subprocessor is required to run the Futurae Service in that they maintain the mobile operating system, the mobile App Store, as well as the push notification infrastructure for sending push notifications to Apple devices. No Personal Data other than randomly generated identifiers is sent through Apple's push notification service.

According to the terms in force between Apple, Inc. and Futurae Technologies AG, any data collected by Apple, Inc.'s mobile app services will be treated in accordance with Apple's Privacy Policy available at https://www.apple.com/legal/privacy/en-ww, which references Standard Contractual Clauses (see Section International Transfers).

Further information regarding Apple, Inc.'s privacy posture can be found at:

http://www.apple.com/legal/privacy.

Data processing activities: Various activities pertaining to the security, performance, and reliability of the Futurae Service. This subprocessor is required to ensure high reliability and availability of the Futurae Service, including resistance against advanced network attacks, such as Distributed Denial-of-Service (DDoS).

The DPA that applies between Futurae Technologies AG and Cloudflare, Inc., and includes Standard Contractual Clauses, can be found at the following link:

Further information regarding Cloudflare, Inc.'s privacy posture can be found at:

* https://www.cloudflare.com/gdpr/introduction/

* https://www.cloudflare.com/transparency/

* https://www.cloudflare.com/privacypolicy/

Data processing activities: Various activities including storage, computation and backup of Futurae Service data. This subprocessor hosts Customer's data related to the Service offered by Futurae. Sensitive data is protected with commercial best practices, such as encryption. This subprocessor is required to run the Futurae Service in that they host the Futurae back-end components.

The DPA that applies between Futurae Technologies AG and Exoscale by AKENES SA can be found at the following link:

https://www.exoscale.com/dpa.

Data processing activities: Various activities including storage, sending push notifications, software analytics and error reporting. For providing software analytics and error reporting, this subprocessor will gain access to anonymized reports (for instance, stack traces of Futurae or White Label app crashes). This subprocessor is required to run the Futurae Authentication Service in that they maintain the mobile operating system, the mobile App Store, as well as the push notification infrastructure for sending push notifications to Android devices. Futurae Technologies AG specifically uses Google, Inc.'s Firebase services. No Personal Data other than randomly generated identifiers is sent through Google Firebase's push notification service.

The DPA that applies between Futurae Technologies AG and Google, Inc., and includes Standard Contractual Clauses, can be found at the following link: https://firebase.google.com/terms/data-processing-terms, referencing the Standard Contractual Clauses at the following link: https://firebase.google.com/terms/firebase-mcc

Further information regarding Google, Inc.'s privacy posture for Firebase services can be found at:

https://firebase.google.com/support/privacy.

Data processing activities: Customer support platform. The data is hosted in the EU, as the Zendesk servers responsible for providing the corresponding data processing activities for Futurae are located in Frankfurt, Germany.

This subprocessor does not have direct access to Customer information, unless Customer explicitly shares user information in support requests and comments. This subprocessor is required to perform the Support Services offered to Customer in order to respect Support SLAs and to notify Futurae engineers of new support tickets.

The content of support ticket and comments is stored on Zendesk servers. When the Customer creates or replies to tickets and comments, the content is fully in control of Customer Employees who have been authorized by Customer to create support tickets with Futurae. Futurae never includes Customer's user information when replying to support tickets and comments.

The DPA that applies between Futurae Technologies AG and Zendesk, Inc., and includes Standard Contractual Clauses, can be found at the following link:

https://www.zendesk.com/company/data-processing-form.

Further information regarding Zendesk, Inc.'s privacy posture can be found at:

https://www.zendesk.com/company/privacy-and-data-protection.