- Acceptable use policy
- Contentful AI Terms of Service
- Digital Services Act
- DMCA takedown notice
- Marketplace terms
- Modern slavery and human trafficking statement
- Privacy at Contentful
- Service level agreement
- Terms of service
- Terms of service Developer Showcase
- Trademark and Brand Use Policy
- Trial Terms of Service
- Legal FAQ
- Security standards
- Other versions of this document
List of data sub-processors
| Entity name | Entity location | Type and purpose of processing | Lawful data transfer mechanism, if applicable |
| Sub-processors necessarily used in the Contentful Services or in support thereof (partly depending on your location and use of Contentful Services) | |||
| Amazon Web Services
Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg | Luxembourg. Server locations: USA [primary region is AWS North Virginia (us-east-1) and our secondary region is AWS Oregon (us-west-2)] | Type: Cloud services and infrastructure.
Purpose: Storage of Customer Content and log files from Contentful services | As between Contentful and AWS EMEA, there is no transfer of personal data to a “third country”. Onward transfer by AWS from EMEA to Inc. is covered by AWS Privacy Shield certification. |
| Amazon CloudFront
Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg | Luxembourg. Server locations: see above | Type: Content delivery network*
Purpose: Distribution of Customer Content to Customer Applications | As between Contentful and AWS EMEA, there is no transfer of personal data to a “third country”. Onward transfer by AWS from EMEA to Inc. is covered by AWS Privacy Shield certification. |
| Fastly, Inc.
475 Brannan St., Suite 300 San Francisco, CA 94107, U.S.A. | USA | Type: Content delivery network*
Purpose: Distribution of Customer Content to Customer Applications | Privacy Shield certification |
| Akamai Technologies, Inc.
150 Broadway Cambridge, MA 02142, U.S.A. | USA | Type: Content delivery network*
Purpose: Distribution of Customer Content to Customer Applications | Privacy Shield certification |
| Cloudinary Inc.
3400 Central Expressway, Suite 110 Santa Clara, CA 95051, U.S.A. | USA | Type: Content delivery network* and image processing
Purpose: Distribution of Customer Content to Customer Applications | Privacy Shield certification |
| FileStack, Inc.
122 E Houston St., Suite 105, San Antonio, Texas 78205, U.S.A. | USA | Type: Content (file) upload and conversion
Purpose: Handling of Customer Content uploads | Privacy Shield certification |
| Zendesk, Inc.
1019 Market St, San Francisco, CA 94103, USA | USA | Type: Customer support services
Purpose: Handling of Customer support requests | Privacy Shield certification |
| Intercom
Dublin, Ireland 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2 | USA | Type: Customer support services and customer communications
Purpose: Handling of Customer support requests and service announcements | Privacy Shield certification |
| Contentful Inc. (a wholly owned subsidiary of Contentful GmbH)
101 Montgomery Street, Suite 1900 San Francisco, CA 94104. U.S.A. | USA | Type: All the types of processing provided by Contentful GmbH
Purpose: Provision of Contentful Services (or parts thereof, such as customer support) | Master Subscription Agreement and the Data Processing Addendum between customer and Contentful GmbH that permit engaging Contentful Inc. |
| *Note that CDNs will cache data/content globally depending on the location where the Customer Content is consumed in order to ensure fast delivery to the endpoint. | |||
| Sub-processors possibly used in the Contentful Services or in support thereof (depending on customer location and customer’s choice how to use Contentful Services or engage with Contentful) | |||
| Pusher Limited
160 Old Street, London, EC1V 9BW, England, UK | UK | Type: Notification service in the Contentful Services
Purpose: Provide push notifications to users of Contentful Services (such as for assigned tasks within a customer account) | As between Contentful and Pusher, there is no transfer of personal data to a “third country”. Pusher utilizes AWS and therefore onward transfer is covered by AWS Privacy Shield certification. |
| Slack Technologies Limited
One Park Place, Upper Hatch Street, Dublin 2, Ireland | Ireland | Type: Discussion channels
Purpose: Customer support and discussion channels for building user communities and a help resource | As between Contentful and Slack, there is no transfer of personal data to a “third country”. Any possible onward transfer is covered by Privacy Shield certification. |
| Civilized Discourse Construction Kit, Inc.
725 Washington Street, Suite 203, Oakland, CA 94607, U.S.A. | USA | Type: Discussion forums
Purpose: Customer support and discussion forums for building user communities and a help resource | Privacy Shield certification |