Subprocessors

Subprocessor Guidelines

Ariso carefully selects subprocessors that meet our high standards for security, privacy, and data protection. Before engaging any subprocessor, we:

• Conduct thorough security and privacy assessments before engaging any subprocessor
• Execute Data Processing Agreements (DPAs) with equivalent security and retention obligations
• Apply Standard Contractual Clauses (SCCs) for cross-border data transfers where required
• Ensure compliance with applicable data protection regulations (GDPR, CCPA, etc.)
• Monitor subprocessor compliance on an ongoing basis

We limit the data shared with each subprocessor to only what is necessary for them to perform their specific function. Customers will be notified of any new subprocessors before they begin processing data, with the opportunity to object.

Current Subprocessors