SafetyCulture uses sub-processors to process personal data on behalf of its customers. SafetyCulture ensures that each sub-processor implements appropriate technical and organisational measures to ensure such processing meets the requirements of applicable data privacy legislation, and to protect the rights of data subjects.
SafetyCulture evaluates each sub-processor initially and on a regular (at least annual) basis. We also adopt supplementary measures to protect such personal data. The supplementary measures are described at https://safetyculture.com/security.
When there is an addition or replacement of a sub-processor, we will update this page. You can subscribe to receive notifications of such changes by entering your details in the form below. If you have questions or concerns about a new sub-processor, we are happy to help. Please contact us at privacy@safetyculture.com.
SafetyCulture sub-processors
Updated in June 2026
Name of sub-processor | Description of processing | Location of sub-processor (entity) | Website | Transfer mechanism |
Amazon Web Services | Data hosting; transmission, content creation and automation | United States | SCCs | |
Anthropic | Content creation and automation | United States | SCCs | |
Cloudflare | Internet security | United States | SCCs | |
Customer.io | Customer communications | United States | SCCs | |
Content creation and automation | United States | SCCs | ||
Knock | Customer communications | United States | SCCs | |
Groq, Inc | Content creation and automation | United States | SCCs | |
Intercom | Customer Support | Ireland | SCCs | |
Merge API, Inc | Platform integration product | United States | SCCs | |
MaestroQA | Customer support and quality assurance | United States | SCCs | |
Okta | Customer identity management | United States | SCCs | |
Qualified | Customer communications | United States | SCCs | |
SafetyCulture affiliates | Support services and product features | United Kingdom; United States; Philippines; Amsterdam | SCCs; Adequacy Decision | |
Snowflake | Data warehouse | United States | SCCs | |
Twilio | Transactional mail service provider | United States | SCCs | |
Workato | Platform integration product | United States | SCCs |
EdApp sub-processors
Updated in June 2026
Name of sub-processor | Description of processing | Location of sub-processor (entity) | Website | Transfer mechanism |
Amazon Web Services | Data storage and processing | United States | SCCs | |
Cloudinary | Media transformation | United States | SCCs | |
EdApp affiliates | Support services and product features | United Kingdom; United States; the Philippines; the Netherlands | SCCs; Adequacy Decision | |
Elasticemail | Customer communications | Canada | Adequacy Decision | |
Hevo Data | Data transformation | United States | SCCs | |
Knock | Customer communications | United States | SCCs | |
Mailgun | Customer communications | United States | SCCs | |
MongoDB | Data storage | United States | Data Privacy Framework | |
Okta | Customer identity management | United States | SCCs | |
Snowflake | Data storage | United States | SCCs | |
Twilio | Transactional mail service provider | United States | SCCs | |
Zapier | Integration services | United States | SCCs |
SHEQSY sub-processors
Data current as of October 2025
Name of sub-processor | Description of processing | Location of sub-processor (entity) | Website | Transfer mechanism |
Amazon Web Services | Web and cloud hosting | United States | SCCs | |
ART Security | 24×7 monitoring center response to duress alerts generated from SHEQSY in Australia and New Zealand | Australia | N/A | |
Clicksend | Customer communications | New Zealand | SCCs | |
Kustomer | Customer support | United States | SCCs | |
LeadChat | Website chat functionality | Australia | SCCs | |
RapidSOS | 24x7 monitoring centre response to duress alerts generated from SHEQSY in USA, Canada and UK | United States | Data Privacy Framework | |
Twilio | Transactional mail service provider | United States | SCCs |
Subscribe for notifications
You may subscribe to receive notice of updates to our list of sub-processors by completing the form below.