List of Sub-processors

Last updated: November 6th, 2026.

Requirement Yogi uses the following vendors to run operations. The terms are defined in the Terms of Service (the “Agreement”) or in the Data Processing Agreement (the “DPA”).

1. Categories of data

1.1. Data in scope of the DPA

When Requirement Yogi processes Personal Data on behalf of the Customer in accordance with the DPA, it acts as a Data Processor, and each vendor is a Sub-processor.

  • Application Data: As defined in the DPA,

  • Support Data: As defined in the DPA,

International transfer mechanisms are defined in the DPA. This page is only provided as a summary.

1.2. Data where Requirement Yogi acts as a Data Controller or Independent Data Controller

When Requirement Yogi deals directly with users, it acts as a Data Controller. Those categories are excluded from the DPA and are governed by our Privacy Policy .

  • License Data: Administrative data required to identify the customer, process payments, manage subscription lifecycles, send legal and security notices (e.g., billing contacts, names, company email, company name, Atlassian SENs, subscription type and length, country, company address).

  • Marketing Data: Contact information used to send newsletters, product updates, and promotional materials to opted-in individuals; analytics (online identifiers, website interactions).

2. Table


Categories of data

Product

Where it is hosted

Link

Data Processing Addenum

Implementation date

Application Data


Requirement Yogi Cloud

Amazon AWS. The data residency zones depend on the customer’s selection:

https://aws.amazon.com/service-terms/

check mark Part 1.14 of their ToS

Pre-2022

Application Data

Requirement Yogi Cloud

Atlassian Forge, in the Customer’s Data Residency.

https://www.atlassian.com/legal/sub-processors#third-party-sub-processors

check mark Atlassian Forge DPA

November 2026

Marketing Data

Our website

OVH, France

https://www.ovh.com/fr/protection-donnees-personnelles/

check mark Part 2 of their ToS

Pre-2022

Application Data

Marketing Data

Cloudflare

USA

https://www.cloudflare.com/cloudflare-customer-dpa/

check mark DPA CloudFlare

2023

Application Data

Marketing Data

OpenAI

Europe / USA

https://openai.com/policies/row-privacy-policy/

check mark DPA OpenAI

2025

Marketing Data

Google Analytics 4

Europe

https://support.google.com/analytics/answer/12017362?hl=en

Data is stored in Europe

2023

Marketing Data

Google Tag Manager

Google Ads

Europe

https://support.google.com/tagmanager/answer/9323295?hl=en

check mark DPA for GTM and Google Ads

2023

Application Data

Marketing Data

Fullview

Europe

https://www.fullview.io/extras/privacy

Data is stored in Europe

2023

Support Data

Slack

USA

https://slack.com/trust/privacy/privacy-policy

check mark DPA for Slack

2020

Support Data

Jira and Confluence

Europe

https://www.atlassian.com

check mark DPA for Atlassian

2013

Support Data

Calendly

USA

https://calendly.com/legal/data-processing-addendum

check mark DPA for Calendly

October 2022

Marketing Data,

License Data,

Support Data (for incident response notifications)

Hubspot

USA

https://legal.hubspot.com/privacy-policy

check mark  DPA for HubSpot

2023

Brevo

Europe

https://www.brevo.com/legal/termsofuse/

check mark DPA for Brevo

October 2026

Marketing Data

License Data

Application Data subject to critical incident response (see DPA Annex II-TOM)

Support Data

Google Workspace (Gmail, Google Docs, Gemini, etc.)

Europe

https://admin.google.com/terms/apps/8/2/en/dpa_terms.html

check mark Part of their ToS

Nov 2024

Marketing Data

License Data

Digital Ocean

Europe

https://www.digitalocean.com/legal

check mark Part of their ToS

Pre-2022

3. History of changes

  • Added Digital Ocean, which we’ve always used for our internal systems.

  • Page created as an extraction of the section from the Privacy Policy, and added the categories of data, split between Sub-processors (governed by the DPA) and Processors (governed by the Privacy Policy).