diff --git a/content/site-policy/privacy-policies/github-subprocessors.md b/content/site-policy/privacy-policies/github-subprocessors.md new file mode 100644 index 000000000000..cbccdf8d475f --- /dev/null +++ b/content/site-policy/privacy-policies/github-subprocessors.md @@ -0,0 +1,38 @@ +--- +title: GitHub Subprocessors +versions: + fpt: '*' +topics: + - Policy + - Legal +--- + +GitHub defines customer data as all data provided by the customer to GitHub through their use of GitHub services. Some customer data is personal data as defined under GDPR. + +The GitHub Subprocessor List identifies subprocessors authorized to subprocess customer or personal data on behalf of GitHub to provide services to our Enterprise customers. This list is applicable for all GitHub services governed by the [GitHub Data Protection Agreement](https://github.com/customer-terms/github-data-protection-agreement). + +GitHub publishes the names of any new subprocessors for its online services at least 30 days in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data. + +To receive notifications of updates to this Subprocessor list, please follow the instructions provided in [AUTOTITLE](/account-and-profile/managing-subscriptions-and-notifications-on-github/setting-up-notifications/about-notifications). + +If you have questions about this list, please contact us at privacy@github.com. + +Name of Subprocessor | Description of Processing | Location of Processing | Corporate Location +---------------------|---------------------------|------------------------|------------------- +Amazon Web Services (AWS) | Cloud Hosted Infrastructure and Data Hosting | United States | United States +Azure (Microsoft) | Cloud Hosted Infrastructure and Data Hosting | United States |United States +Azure Cognitive Services | Customer support ticketing analysis | United States | United States +Cloudflare | Content delivery service | United States | United States +Fastly | Content delivery service | United States | United States +Google Cloud Platform (GCP) | Cloud Hosted Infrastructure | United States | United States +Microsoft | Technical Services | United States | United States +Moveworks | Customer support ticketing analysis | United States | United States +NexMo (aka Vonage) | SMS notification provider for 2 Factor Authentication | United States | United States +Obsidian Security | Security management | United States | United States +Pusher | Building and managing real-time infrastructure for web and mobile applications | United States | United States +SendGrid | SMS notification provider for 2 Factor Authentication | United States | United States +Splunk | Logging pipeline for security log, storage, and search | United States | United States +Twilio | SMS notification provider for 2 Factor Authentication | United States | United States +VividCortex | Monitor database performance, efficiency, and uptime | United States | United States +Zapier | App infrastructure and support | United States | United States +Zendesk | Customer support ticketing system | United States | United States diff --git a/content/site-policy/privacy-policies/index.md b/content/site-policy/privacy-policies/index.md index 3019bb281f84..065f4f06661b 100644 --- a/content/site-policy/privacy-policies/index.md +++ b/content/site-policy/privacy-policies/index.md @@ -7,6 +7,7 @@ topics: - Legal children: - /github-privacy-statement + - /github-subprocessors - /github-subprocessors-and-cookies - /github-codespaces-privacy-statement - /github-candidate-privacy-policy @@ -18,4 +19,3 @@ redirect_from: - /github/site-policy/github-data-protection-agreement-non-enterprise-customers - /site-policy/privacy-policies/github-data-protection-agreement --- -