Company · Legal
List of subprocessors
List in effect as of October 12, 2026
To provide the Profiles Flow service, EMENDO uses the providers below. Each one receives only the data required for its role. We inform our customers of any addition or replacement, in accordance with article 12.3 of our general terms and conditions of sale.
Permanent subprocessors
| Provider | Company country | Role | Data concerned | Data location |
|---|---|---|---|---|
| Scaleway SAS | France | Hosting of the application, database, files and backups | All service data | France |
| Scaleway SAS | France | Sending of service emails: login codes, invitations, profile information, contact request notifications, subscription emails | Recipient's email address and name, email content | France |
| Stripe Payments Europe, Ltd. | Ireland (US group) | Credit card payment and SEPA direct debit | Company name, billing email, payment method | Ireland |
| Sellsy SAS | France | Issuing of invoices | Company name, address, SIRET, VAT number, billing email, amounts | France (hosted by Scaleway) |
Subprocessors depending on the features used
| Provider | Company country | When | Data concerned |
|---|---|---|---|
| Apple Inc. | United States | When an employee adds their card to Apple Wallet | Card content: name, job title, photo, logo, colors, link to the contact card |
| Google LLC | United States | When an employee adds their card to Google Wallet | Card content: name, job title, photo, logo, colors, link to the contact card |
| Google LLC | United States | When the customer enables the Google Workspace module | Each employee's email signature, set in their Gmail account (no access to messages) |
| Microsoft Corporation | United States | When the customer enables the Microsoft 365 or Outlook (Microsoft 365) modules | The company's Microsoft 365 users (name, job title, email, phone numbers) and each employee's email signature, set in Outlook |
The Outlook (Exchange) module and the Active Directory module involve no additional provider: they connect Profiles Flow directly to the customer's servers.
Transfers outside the European Union
The US-law companies listed above may be subject to the CLOUD Act and Section 702 of FISA. Any transfers are governed by the EU-US Data Privacy Framework when the company participates in it, or by the European Commission's standard contractual clauses.
Change history
| Date | Change |
|---|---|
| October 12, 2026 | First publication of the list |