SurveyMonkey Subprocessors
Last updated: August 9, 2024
If you wish to receive email notifications of updates to our Subprocessor List, please subscribe here.
Please note that not all subprocessors are used in the provision of all of our Services. Our subprocessor list issegmented into specific SurveyMonkey services.
Jump to:Subprocessors used to provide SurveyMonkey
Subprocessors used to provide Audience/Market Research
Subprocessors used to provide GetFeedback Digital
Subprocessors used to provide GetFeedback Direct
Subprocessors used to provide Wufoo
Subprocessors used to provide TechValidate
Subprocessors used to provide Customer Experience (CX)
Subprocessors used to provide SurveyMonkey ApplySubprocessors used to provide SurveyMonkey
Subprocessor

AmazonWeb
Services(“AWS”)

PurposePersonal Data

Data storage
services for storing
assets and databasehosting; Content
distribution
network (“CDN”)
services

Personal data:
Names of Individuals (First and/or
Last Names)
Any unique identifier that can beused to tie to a particular personin the real world
Vehicle registration plate number
Data of Birth
Email Address
Phone Number
Physical Address (i.e. 123 Fake St)
ZIP/Postal CodeApartment Numbers (i.e. AddressLine 2)IP address

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

United States - low

SCCs

Please see AWS’s
commitments to data
control, data privacy, andsecurity.

Canada non-material
Ireland non-material

Specifically,
SurveyMonkey uses thelatest generation of EC2
which automaticallygain the protection of
the AWS Nitro System.
Using purpose-built
hardware, firmware, andsoftware, AWS Nitro
provides unique andindustry-leading security
and isolation by
offloading thevirtualization of storage,
security, and networking
resources to dedicatedhardware and software.
This enhances security
by minimizing theattack surface andprohibitingSubprocessor

PurposePersonal Data

IMSI/IMEI numbers
MAC address
Insurance details
Family members and
Dependents
Sensitive Personal Data can be
included in survey response orform data and so AWS may store
any of the following:
Government/National ID (e.g. SSN,
SIN), Driver's License number,
Passport number
Username and password,
Authentication credentials
Financial and Payment
information (account log‐in,financial account, debit card, or
credit card number in
combination with any required
security or access code, password,or credentials allowing access toan account)

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

administrative accesswhile improving
performance.
All data in transit
between our secure
datacenter facilities,
availability zones, andregions is encrypted
automatically at the
hardware level.
SurveyMonkey alsoutilizes AWS KeyManagement Services tocontrol and manage ourown keys within
FIPS-140-2 certified
hardware security
modules. Regardless ofwhether data is
encrypted or
unencrypted, we will
always work vigilantly toprotect data from any
unauthorized access.
Our security team has
carried out acomprehensive review

Subprocessor

PurposePersonal Data

Geolocation
Race/ethnicity
Religious/Political/Trade Union
Affiliation
Sex life or Sexual Orientation
Health data (incl. prescription
medications, medical procedures
and tests, diagnoses, medical
practitioners and area of practice,
health card numbers etc.)
Biometrics (e.g. fingerprints, voicerecordings, photos)
Genetic data
Salary/Income (or ranges ofsame)
Customer survey responses(responses received by acustomer to the survey theycreate within SurveyMonkey
accounts)

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnicalof all AWS cloudinfrastructure services
and changes are kept
under continual review.
SurveyMonkey encrypts
all data at rest in ourdata centres using AES
256 based encryption.
Additionally,
SurveyMonkey encrypts
all data in motion using(i) RSA with 2048 bit key
length based certificates
generated via a publicCertificate Authority, forcommunications withentities outside
SurveyMonkey’s data
centres, and (ii) RSA 256
certificates generated
via Internal Certificate
Authority, for all the data
within the data centre.
These encryption efforts
prevent the acquisitionof data in an intelligible
form This also detersSubprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

wiretapping between
the two end-points
while such data is intransmission or instorage.

Credit score/record
Communications - the contents
of a consumer’s private
communications, unless thecompany is the intended
recipient of the communication
Criminal record
Quasi identifiers: This could
include data which is not
personal unless linked to otherdata e.g. web identifiers, device
information, browser data andother metadata which may insome cases be linkable to othercategories of data listed above.
Argos

Assist withtranslation services
ordered as part ofthe professional
services
SurveyMonkey
offers. This
subprocessor is only
utilized when aNames of Individuals (First and/or
Last Names) , Email, Phone
Number, Content ofcommunications sent duringprovision of professional services
Respondent ID, Respondentemail address, First and last
name, phone number, Browser

Poland non-material

SCCs

Please see Argos’
security information and
ISO 27001 certificate
here.

Subprocessor

InginitPurposePersonal Data

SurveyMonkey
customer has
purchasedadditional
professional
services, specificallyto translate survey
question, answer,
and response text.

information, Survey Responses
including open text response
data

Professional
Services project
coordinators(contractors). This
subprocessor is only
utilized when a
SurveyMonkey
customer has
purchasedadditional
professional
services.

Names of Individuals (First and/or
Last Names) , Email, Phone
Number, Content ofcommunications sent duringprovision of professional services
Respondent ID, Respondentemail address, First and last
name, phone number, Browser
information, Survey Responses
including open text response
data

Location andAssessment of Legal
Regime Risk

India - low

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

SCCs

Please see Inginit’s
Security page, in
addition to theinformation below.
SurveyMonkey employs
remote desktop control
over contracted
professional services
agents. All personnel
handling personal data
are subject toconfidentiality
obligations.
Anti-malware andmalicious software
detection controls are inplace to ensure no
unauthorised access toSubprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

data can take place, andall data are encrypted
when transferred overpublic networks.
There are also specificdata handlingprocedures in place
which ensure strict‘need to know’ access
controls are in place, as
well as policies which
ensure the deletion of
the data after use.
Further access controls
also require specificidentification of theterminal user on therelevant systems, as well
as requiring
identification codes andpassword complexity
standards for anyone
who needs to access thedata. VPNs, two-factor
authentication androle-based access arealso baked into the mainSubprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

access control
procedures.
During transmission,
data are subject tovarious strict
transmission controls
including procedures
preventing the datafrom being read, copied,altered or deleted whilein transit. Encryption
technologies and theuse of firewalls are inplace to protect
gateways and firewalls
through which the data
travels, and VPN
connections safeguard
the data connection tointernal networks.
Infrastructure isconstantly monitored(e.g. through ICMP-Ping
at network level), andthe end-to-end security
monitoring takes place
to ensure thecompleteness andSubprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

correctness of alltransfers.
All encryption solutions
are deployed with noless than a 128-bit key forsymmetric encryption
and a 1024 (or larger) bit
key length forasymmetric encryption.
Input control ensuresthat it is possible tocheck and establish
whether and by whom
Personal Data has been
input into dataprocessing systems or
removed.
Such controls include
authentication andlogging. Vulnerability
management is in place
to detect andimmediately remedy
any systemvulnerabilities.

Subprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

Data destruction
procedures also ensurethat data subject to thetransfer are secured andnot held for any longer
than necessary toachieve the purposes ofproviding professional
services ordered by thecustomer.
Microsoft(Sharepoint)

Internal document
repository

Customer Data as requested toprovide Professional Services (eg:survey design and response
analysis)

USA - low

SurveyMonk
ey Inc.

Customer andproduct support
services; productdevelopment,
infrastructure, andtechnology services.

Respondent: Contact Information, USA - low
Usage Information, Device
Information, Cookie and othertracking information

SCCs

Please see Microsoft
Cloud Transfer
Whitepaper and security
documentation.

Data
Privacy
Framework(wheretransfer is
EU/UK/Switzerland to
US);
SCCs

Please see description
above and our Security
Statement and GDPR
Whitepaper.

Subprocessor

PurposePersonal Data

SurveyMonk
ey Australia
Pty Limited

Customer andproduct support
services; productdevelopment,
infrastructure, andtechnology services.

Respondent: Contact Information,
Usage Information, Device
Information, Cookie and othertracking information

SurveyMonk
ey Canada
Inc.

Customer andproduct support
services; productdevelopment,
infrastructure, andtechnology services.

SurveyMonk
ey UK Ltd.

Salesforce(including
Sales Cloud,Service
Cloud,
Community
Cloud,

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

Australia - low

SCCs

Please see description
above and our Security
Statement and GDPR
Whitepaper.

Respondent: Contact Information,
Usage Information, Device
Information, Cookie and othertracking information

Canada non-material

Adequacy

Please see description
above and our Security
Statement and GDPR
Whitepaper.

Customer andproduct support
services; productdevelopment,
infrastructure, andtechnology services.

Respondent: Contact Information,
Usage Information, Device
Information, Cookie and othertracking information

UK non-material

Adequacy

Please see description
above and our Security
Statement and GDPR
Whitepaper.

Customer Support

Names of Individuals (First and/or
Last Names) , Email, Phone
Number, Content ofcommunications sent duringprovision of Customer Support

USA - low

SCCs

Please see Salesforce’s
Security Whitepaper,
security certifications,
DPA FAQ, and Trust andCompliancedocumentation.

Subprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

SCCs

SurveyMonkey data isstored encrypted at rest
on AWS S3. Snowflake
uses strong AES 256 bit
encryption with ahierarchical key model.
Snowflake implements
a comprehensive
monitoring and logging
system.

Chatter,
Salesforce
Platform,
Customer
Data
Platform,Marketing
Cloud,
Mulesoft,
and Tableau
CRM)
Snowflake

Storage of usage
data for analytics
and productdevelopment.

IP Address, Email address (firstand last name),
Quasi identifiers
Respondent ID

USA - lowSnowflake is ISO 27001
and SOC 2 certified andthese certifications havebeen reviewed by theSurveyMonkey security
team in full as part ofSubprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

our risk review.
Employees are provided
with both Security andPrivacy AwarenessTraining overview which
they are required tocomplete at hire andthen on an annual basis
thereafter. In addition, as
needed, other quarterly
training on featured
security and privacy
related topics and role
specific training for
personnel whose role
responsibilities require
additional security
procedures are provided.
Access to any
production environmentis based on leastprivileged access rules
and role based access
controls anddeprovisioning issimilarly managed andmonitored.

Subprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

See Snowflake’s
documentation for more
information: Data
Security and TrustCenter.
Sparkpost

Email delivery
service.

Email address, meta data (openclicks, date stamps)

USA - low

SCCs

See: Security Program SparkPost
SparkPost maintains
Customer Data in an
encrypted format at restand in transit using SSL,HTTPS, andopportunistic TLS asapplicable.
Customer Data is
encrypted when intransit between
Customer andSparkPost Services
using HTTPS. Customer
Data is encrypted whenin transit between
SparkPost and Recipient
using opportunistic TLS.

Subprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

SparkPost conducts
various third-party
audits to attest to
various frameworks
including SOC 2 Type II
and regular application
vulnerability andpenetration testing.
SparkPost does not store
the message body of an
Email after it has either
been delivered to the
Recipient or has
bounced or otherwise
been rejected by the
mailbox provider, which
typically occurs within
seconds. In the event ofa rejection or bounce,
SparkPost will retain themessage body for alimited period of time toallow for the Emailtransmission to be
retried. If thetransmission is still
unsuccessful, themessage body isSubprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

permanently deleted.
SparkPost only stores
Recipient Personal Datain raw form for a limited
amount of time after thetransmission of an Emailto a Recipient. After the
initial retention period,
the Personal Data is
pseudonymized througha one-way hash and is
only stored in its
pseudonymized form.
For more information
about this processplease see the Sparkpost
Data FAQs available
here.
SplunkSoftware forsearching,monitoring, andanalyzingmachine-generated
data.

Respondent ID, Respondentemail address, First and last
name, phone number, Browser
information, Open text response
data

USA - low

SCCs

Please see Splunk’s
security documentationand compliancecertificates.

TwilioSMS delivery.

Respondent phone number,Content of SMS communications

USA - low

SCCs

Please see Twilio’s
security certification,

Subprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

security statement, andsecurity overview.
UpworkProfessional
Services project
coordinators(contractors). This
subprocessor is only
utilized when a
SurveyMonkey
customer has
purchasedadditional
professional
services

Names of Individuals (First and/or
Last Names) , Email, Phone
Number, Content ofcommunications sent duringprovision of professional services
Respondent ID, Respondentemail address, First and last
name, phone number, Browser
information, Survey Responses
including open text response
data

USA - low
Australia - low
Italy non-material

SCCs,
adequacy

Please see Upwork’s
security page, in
addition to theinformation below.
SurveyMonkey employs
remote desktop control
over contracted
professional services
agents. All personnel
handling personal data
are subject toconfidentiality
obligations.
Anti-malware andmalicious software
detection controls are inplace to ensure no
unauthorised access todata can take place, andall data are encrypted
when transferred overpublic networks.
There are also specificdata handlingSubprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

procedures in place
which ensure strict‘need to know’ access
controls are in place, as
well as policies which
ensure the deletion of
the data after use.
Further access controls
also require specificidentification of theterminal user on therelevant systems, as well
as requiring
identification codes andpassword complexity
standards for anyone
who needs to access thedata. VPNs, two-factor
authentication androle-based access arealso baked into the main
access control
procedures.
During transmission,
data are subject tovarious strict
transmission controls
including proceduresSubprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

preventing the datafrom being read, copied,altered or deleted whilein transit. Encryption
technologies and theuse of firewalls are inplace to protect
gateways and firewalls
through which the data
travels, and VPN
connections safeguard
the data connection tointernal networks.
Infrastructure isconstantly monitored(e.g. through ICMP-Ping
at network level), andthe end-to-end security
monitoring takes place
to ensure thecompleteness andcorrectness of alltransfers.
All encryption solutions
are deployed with noless than a 128-bit key forsymmetric encryption
and a 1024 (or larger) bitSubprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

key length forasymmetric encryption.
Input control ensuresthat it is possible tocheck and establish
whether and by whom
Personal Data has been
input into dataprocessing systems or
removed.
Such controls include
authentication andlogging. Vulnerability
management is in place
to detect andimmediately remedy
any systemvulnerabilities.
Data destruction
procedures also ensurethat data subject to thetransfer are secured andnot held for any longer
than necessary toachieve the purposes ofprofessional services.

Subprocessor

UpworkXoriant,
InfoSol,
Tredence,
Impetus,
Valuelabs

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Customer Support
team task
augmentation(contractors).

Customer name (First and/or Last
Names) , Email, Phone Number,Content of communications sent
during provision of Customer
SupportPhilippines low

Data & Analytics
team task
augmentation(contractors).

Data as listed for Snowflake

USA - low

Mechanismof transfer

Supplementary Measures:
Contractual,
Organizational, andTechnical

SCCs

See above.

SCCs

All the security controls
available and listed
above for Snowflake areutilized to ensure leastprivileged access for ourthird party contractors.
We utilize remote
desktop security as wellas the other security
controls which apply to
any internal
SurveyMonkey systems.
See our security
statement for further
details.

Costa Rica lowSubprocessors used to provide Audience/Market Research
Subprocessor

PurposePersonal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and TechnicalAWS

See above

See above

See above

See above

See above

Microsoft

See above

See above

See above

See above

See above

SurveyMonkey
Affiliates(SurveyMonkey Inc.,
SurveyMonkey
Australia Pty
Limited,SurveyMonkey
Canada Inc.,
SurveyMonkey UKLtd.)

See above

See above

See above

See above

See above

Salesforce

See above

See above

See above

See above

See above

Snowflake

See above

See above

See above

See above

See above

Sparkpost

See above

See above

See above

See above

See above

SplunkSee above

See above

See above

See above

See above

TwilioSee above

See above

See above

See above

See above

UpworkProfessional
Services

See above

See above

See above

See above

UpworkCustomer
SupportSee above

See above

See above

See above

Subprocessor

PurposeXoriant, InfoSol,
Tredence, Impetus,
Valuelabs

See above

Personal Data

See above

Location andAssessment ofLegal Regime Risk

See above

Mechanism oftransfer

See above

Supplementary Measures: Contractual,
Organizational, and TechnicalSee above

Subprocessors used to provide GetFeedback Digital
Subprocessor

PurposePersonal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and TechnicalAWS

See above

See above

See above

See above

See above

GoogleOpen-text
responsetranslation
featurerequestedby a subset
ofGetFeedbac
k Digitalcustomers.

SurveyResponse data.
This may or may
not include
personal data,
depending on
the types ofquestions in thesurvey and how
the respondentchooses toanswer thequestions.

USA - low

SCCs

https://cloud.google.com/security/

SurveyMonkey
Affiliates

See above

See above

See above

See above

See above

Subprocessor

PurposePersonal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and Technical

Data is nottransferred out ofEurope.

https://mongodb.scalegrid.io/hubfs/W
hitepaper-ScaleGrid-Infrastructure-Se
curity.pdf(SurveyMonkey
Inc.,
SurveyMonkey
Australia Pty
Limited,SurveyMonkey
Canada Inc.,
SurveyMonkey
UK Ltd.)ScaleGrid

Database
hosting

Names ofIreland Individuals (First non-material
and/or Last
Names)
Any unique
identifier thatcan be used totie to aparticularperson in thereal world
Vehicleregistration
plate number
Data of Birth
Email AddressSubprocessor

PurposePersonal Data

Phone Number
Physical
Address (i.e. 123
Fake St)
ZIP/Postal CodeApartment
Numbers (i.e.
Address Line 2)
IP address
IMSI/IMEI
numbers
MAC address
Insurance
details
Familymembers and
Dependents
Sensitive
Personal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and TechnicalSubprocessor

PurposePersonal Data

can be included
in survey
response orform data andso AWS may
store any of thefollowing:
Government/Na
tional ID (e.g.
SSN, SIN),
Driver's License
number,Passport
numberUsername andpassword,
Authentication
credentials
Financial andPayment
information(account log‐in,financialaccount, debit
card, or credit
card number in
combination

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and TechnicalSubprocessor

PurposePersonal Datawith anyrequired
security oraccess code,
password, or
credentials
allowing accessto an account)
Geolocation
Race/ethnicity
Religious/Politic
al/Trade Union
Affiliation
Sex life or
SexualOrientation
Health data(incl.
prescription
medications,medicalprocedures andtest, diagnoses,
medicalpractitioners

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and TechnicalSubprocessor

PurposePersonal Dataand area ofpractice, healthcard numbers
etc.)
Biometrics (e.g.
fingerprints,
voice
recordings,
photos)Genetic data
Salary / Income(or ranges ofsame)
Customersurveyresponses(responses
received by acustomer to thesurvey theycreate within
SurveyMonkey
accounts)
Credit score /recordLocation andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and TechnicalSubprocessor

PurposePersonal Data

Communications - the contents
of a consumer’s
privatecommunications, unless thecompany is theintendedrecipient of thecommunication
Criminal record
Quasi
identifiers: This
could include
data which is
not personal
unless linked toother data e.g.
web identifiers,
deviceinformation,browser dataand other metadata which may
in some cases
be linkable toother categories

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and TechnicalSubprocessor

PurposePersonal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and Technicalof data listed
above.
UpworkEngineeringTeamaugmentati
on(contractors)

See above

Brazil - low

SCCs

See above

Subprocessors used to provide GetFeedback Direct
Subprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanism oftransfer

Supplementary Measures:
Contractual, Organizational,
and TechnicalAWS

See above

See above

See above

See above

See above

Functional
Software Inc.
(Sentry)

Applications
error
capturing(site healthmonitor).

Direct identifying
information (e.g.
name, email
address,
telephone)

USA - low

SCCs

See Sentry’s security page formore details.

Indirect
identifying
information (e.g.

Subprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanism oftransfer

Supplementary Measures:
Contractual, Organizational,
and Technicaljob title, gender,
date of birth)
Deviceidentification data
and traffic data
(e.g. IP addresses,
MAC addresses,
web logs, browser
agents)Any personal data
supplied by end
users of theService.
GoogleHosts survey
assets andrespondent
assets, NLP
forrespondent
data,
respondent
data hosted
on Google
platform forsearching/indexing
dashboards.

Survey Response
data. This may or
may not include
personal data,
depending on thetypes of questionsin the survey andhow therespondentchooses to answer
the questions.

USA - low

SCCs

https://cloud.google.com/secu
rity/Subprocessor

Heroku(if you utilize
GetFeedback
Direct’s EU
Data Center,
Heroku is not a
subprocessor)
IPdataPurposePersonal Data

Application
host and datastore thatruns on AWS.

See ‘Amazon/AWS’
above

USA - low

SCCs

Please see Heroku’s security
certifications and Trust andCompliance documentation.

IP address

USA - low

SCCs

Please see IPdata’s Privacy
Policy for more information.

Geolocationlookupfor
Respondents

Location andAssessment of Legal
Regime Risk

Mechanism oftransfer

Supplementary Measures:
Contractual, Organizational,
and Technical

SurveyMonkey
Affiliates(SurveyMonkey
Inc.,
SurveyMonkey
Australia Pty
Limited,SurveyMonkey
Canada Inc.,
SurveyMonkey
UK Ltd.)See above

See above

See above

See above

See above

Salesforce

See above

See above

See above

See above

See above

Subprocessor

PurposePersonal Data

Location andAssessment of Legal
Regime Risk

Mechanism oftransfer

Supplementary Measures:
Contractual, Organizational,
and TechnicalSplunkSee above

See above

See above

See above

See above

UpworkEngineeringTeamaugmentation(contractors)

See above

Brazil - low

SCCs

See above

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Subprocessors used to provide Wufoo
Subprocessor

PurposePersonal Data

Supplementary Measures: Contractual,
Organizational, and TechnicalAWS

See above

See above

See above

See above

See above

Microsoft

See above

See above

See above

See above

See above

SurveyMonkey
Affiliates(SurveyMonkey
Inc.,
SurveyMonkey
Australia Pty
Limited,SurveyMonkey
Canada Inc.,

See above

See above

See above

See above

See above

Subprocessor

PurposePersonal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and Technical

SurveyMonkey
UK Ltd.)Salesforce

See above

See above

See above

See above

See above

Snowflake

See above

See above

See above

See above

See above

Sparkpost

See above

See above

See above

See above

See above

SplunkSee above

See above

See above

See above

See above

Subprocessors used to provide TechValidate
Subprocessor

PurposePersonal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and TechnicalAWS

See above

See above

See above

See above

See above

Engine Yard

Websitehosting tooland cloudapplication
management

See ‘AWS’ above

US - low

SCCs

Engine Yard is contractuallycommitted to: host data at a secure
facility (such as AWS) with data center
access restrictions, monitoring,security staff, and other commerciallyreasonable physical security
measures; maintain restrictednetwork access, firewalls, server
hardening measures, user
authentication protocols, event
logging, and other commerciallySubprocessor

PurposePersonal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and Technicalreasonable system and network
security measures designed toprotect the security of personal data;encrypt personal data where feasible
and commercially reasonable inaccordance with industry standards
for encryption at rest and in transit;
and grant access on the principle of
least privilege on a role basis andsubject to authorization anddeactivation practices ofSurveyMonkey.
Microsoft

See above

See above

See above

See above

See above

SurveyMonkey Affiliates(SurveyMonkey Inc.,
SurveyMonkey Australia Pty
Limited,SurveyMonkey Canada Inc.,
SurveyMonkey UK Ltd.)See above

See above

See above

See above

See above

Salesforce

See above

See above

See above

See above

See above

Subprocessors used to provide Customer Experience (CX)
Subprocessor

PurposePersonal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and TechnicalAWS

See above

See above

See above

See above

See above

Engine Yard

See above

See above

See above

See above

See above

Microsoft

See above

See above

See above

See above

See above

SurveyMonkey
Affiliates(SurveyMonkey
Inc.,
SurveyMonkey
Australia Pty
Limited,SurveyMonkey
Canada Inc.,
SurveyMonkey
UK Ltd.)See above

See above

See above

See above

See above

Salesforce

See above

See above

See above

See above

See above

Subprocessors used to provide SurveyMonkey Apply
Subprocessor

AWS

PurposeSee above

Personal Data

See above

Location andAssessment ofLegal Regime Risk

See above

Mechanism oftransfer

See above

Supplementary Measures: Contractual,
Organizational, and TechnicalSee above

Subprocessor

PurposePersonal Data

Location andAssessment ofLegal Regime Risk

Mechanism oftransfer

Supplementary Measures: Contractual,
Organizational, and Technical

Bridgewater
Labs

Task
augmentation(engineering
contractors)

All possible
personal data
categories
collected in SM
Apply forms.

Canada non-material

SCCs

All the security controls available andlisted above for AWS are utilized toensure least privileged access for ourthird party contractors. We utilize
remote desktop security as well as
the other security controls which
apply to any internal SurveyMonkey
systems. See our security statement
for further details.

Microsoft

See above

See above

See above

See above

See above

SurveyMonkey
Affiliates(SurveyMonkey Inc.,
SurveyMonkey
Australia Pty
Limited,SurveyMonkey
Canada Inc.,
SurveyMonkey
UK Ltd.)See above

See above

See above

See above

See above

Salesforce

See above

See above

See above

See above

See above

Sparkpost

See above

See above

See above

See above

See above

UpworkCustomer
SupportSee above

See above

See above

See above