Sub-processors (third-party sub-processors)

Software used

Intercom

Website: https://www.intercom.com/

Purpose: Our support uses the Intercom chat for enquiries and uses other functions for customer information (e.g. to inform about updates)

Processing country: USA

Data protection level: EU-U.S. DPF / Swiss-U.S. DPF

Cloudflare (load balancing)

Website: https://www.cloudflare.com/de-de/application-services/products/load-balancing/

Purpose: Dualoo uses Cloudflare’s Content Delivery Network to improve availability and performance and to fend off DDOS attacks.

Processing country: Worldwide (same continent as user, as the next endpoint is used)

Data protection level: EU-U.S. DPF / Swiss-U.S. DPF

Cloudflare (Turnstile)

Website: https://www.cloudflare.com/de-de/application-services/products/turnstile/

Purpose: We use Turnstile CAPTCHAs to prevent automated bot submissions.

Processing country: Worldwide

Data protection level: EU-U.S. DPF / Swiss-U.S. DPF

Friendly Captcha

Website: https://friendlycaptcha.com/

Purpose: Dualoo uses Friendly Captcha to protect against automated access (bots) and to ensure that form entries come from real people. Minimal technical data such as IP address and browser information is processed without setting cookies to
or creating user profiles.

Processing country: European Union

Level of data protection: GDPR

Elastic

Website: https://www.elastic.co/

Purpose: Dualoo uses Elastic to centrally collect, process and provide all system and application logs – as well as to continuously monitor the servers and application performance.

Processing country: European Union

Level of data protection: GDPR

Google Workspace

Website: https://workspace.google.com/

Purpose: We use Google e-mail, calendar, Meet etc. for productive work.

Processing country: USA

Data protection level: EU-U.S. DPF / Swiss-U.S. DPF

Google Analytics / Google Ads

Website: https://analytics.google.com/ & https://business.google.com/de/google-ads/?pli=1

Purpose: To prevent Dualoo users from receiving Google Ads advertising & to improve Dualoo.

Processing country: USA

Data protection level: EU-U.S. DPF / Swiss-U.S. DPF

Nine

Website: https://nine.ch/

Purpose: Operation of the Dualoo web application

Processing country: Switzerland

Level of data protection: DSG / GDPR

Infomaniac

Website: https://www.infomaniak.com/en

Purpose: Operation of the web application

Processing country: Switzerland

Level of data protection: DSG / GDPR

ConvertAPI

Website: https://www.convertapi.com/

Purpose: Conversion of file types (e.g. generated e-mail attachments, letters and evaluations from Word to PDF).

Processing country: Germany

Level of data protection: GDPR

Raygun

Website: https://raygun.com/

Purpose: Raygun visualizes the log file of Dualoo and makes it easier to find errors in operation. This allows us to fix bugs quickly before many people get annoyed.

Processing country: USA

Data protection level: standard contractual clauses

Sendgrid

Website: https://sendgrid.com/en-us

Purpose: Twillo Sendgrid sends and receives emails that the system itself (task management) sends recruiters to candidates and vice versa.

Processing country: European Union

Level of data protection: GDPR

Salesforce

Website: https://www.salesforce.com/de/

Purpose: We use Salesforce as a CRM to provide reliable support for sales and consulting processes.

Processing country: Germany

Level of data protection: GDPR

Slack from Salesforce

Website: https://slack.com/

Purpose: The Dualoo team also uses Slack from Salesforce for internal communication.

Processing country: USA

Data protection level: Standard contractual clauses & EU-U.S. DPF / Swiss-U.S. DPF

Atlassian

Website: https://www.atlassian.com/

Purpose: Atlassian (Jira, Confluence and Loom) support Dualoo in the organization of support requests, projects and internal documentation. This allows us to keep track of complex issues, coordinate feedback and troubleshooting efficiently and share knowledge clearly through short videos.

Processing country: Germany

Level of data protection: GDPR

Toolsplus

Website: https://toolsplus.io/

Purpose: The add-on links Intercom with Jira so that support requests and chats can be directly linked to the corresponding tickets. This allows us to keep track of how many customers want a certain feature and to inform all those who have reported a feature request or an error.

Processing country: USA

Data protection level: standard contractual clauses

Ortto

Website: https://ortto.com/

Purpose: Ortto (formerly AutopilotHQ) sends the documents and invitations when a download or webinar registration is made, for example.

Processing country: USA

Data protection level: EU-U.S. DPF / Swiss-U.S. DPF

Demodesk

Website: http://demodesk.com/

Purpose: We use Demodesk for online meetings to demonstrate Dualoo or to help with support.

Processing country: Germany

Level of data protection: GDPR

Bexio

Website: https://www.bexio.com/en-CH/

Purpose: Bexio is used to map the entire billing of services to our customers.

Processing country: Switzerland

Level of data protection: DSG / GDPR