AFTERSHIP SUBPROCESSORS

A subprocessor is a vendor AfterShip uses to process personal data on behalf of customers and carriers, who are data controllers of such data.

AfterShip requires each subprocessor to satisfy obligations equivalent to those that bind the data processor, AfterShip itself, as stated in AfterShip’s Data Processing Agreement (available here). Such obligations include, without limitations, the following:

• The personal data must be processed pursuant to the instructions from the data controllers (customers and carriers, depending on the case), as communicated to the relevant subprocessors by AfterShip;

• To perform data processing activities, the subprocessors must only use personnel who are reliable and subject to binding obligations with respect to data protection and security, as required under applicable laws and regulations;

• Subprocessors must promptly inform AfterShip in case of any data or security breach; and

• Subprocessors must cooperate with AfterShip, as applicable, to address requests from data controllers, data subjects, or data protection authorities.

Pursuant to the above, AfterShip engages the following subprocessors to perform processing activities on behalf of AfterShip’s data controllers. In case a new subprocessor is added to the list, AfterShip will provide the data controllers with relevant notice, to the extent required under contractual agreement, and will promptly update this table with the relevant information.

AfterShip Authorized Subprocessors