|SendGrid||Email address, Full name||US (Privacy Shield)||https://sendgrid.com/policies/privacy/||Email Service provider|
|RestPack||Non Personal data risk stats / analytics for the user.||US(Privacy Shield)||https://restpack.io/restpack/privacy||PDF reports|
|Scanii||Files that are attached by the user virus scanned.||EU Data centre||https://docs.scanii.com/privacy-policy.html https://docs.scanii.com/privacy-shield-policy.html||Virus scanning|
|Zero Bounce||Email address||US(Privacy Shield)||https://www.zerobounce.net/privacy-policy.html||Email Checking|
|Help Scout (not directly connected to the app)||Email address and name if they send us a query||US(Privacy Shield)||https://www.helpscout.com/company/legal/dpa/|
|Google Analytics||Usage data, IP anonymised||US (Privacy Shield)||https://policies.google.com/privacy?hl=en||Usage Tracking|
|Google Tag Manager||Usage data, IP anonymised||US (Privacy Shield)||https://policies.google.com/privacy?hl=en||Usage Tracking|
|Crazy Egg (Only used on register page)||Usage data, IP anonymised, All personal data masked.||US (Privacy Shield)||https://www.crazyegg.com/privacy https://help.crazyegg.com/article/165-crazy-eggs-gdpr-readiness||Usage Tracking|
|Microsoft Azure||Hosts the Apomatix platform see below||EU(France) & UK|| https://docs.microsoft.com/en-gb/microsoft-365/compliance/offering-iso-27001
We host the platform on Azure. We use a segregated SQL database pool for live instances. Each instance created for a company has its own database created. These databases are backed up and can be restored to a previous state 7 days previous. Encryption in rest is used on the databases and only key personnel has access to the databases. These databases have a firewall in place which only allows Azure or key locations to access the database servers.
We use monitoring and logging on the applications on Azure.
Microsoft Azure has many security certificates including ISO 27001 https://docs.microsoft.com/en-gb/microsoft-365/compliance/offering-iso-27001