Contents

Summary

OutThink uses certain sub-processors to assist in providing OutThink’s services. A sub-processor is a third-party data processor engaged by OutThink who agrees to receive personal data from OutThink intended for processing activities to be carried out (i) on behalf of OutThink customers; (ii) in accordance with customer instructions as communicated by OutThink; and (iii) in accordance with the terms of a written contract between OutThink and the sub-processor.

Prior to onboarding sub-processors, OutThink conducts an audit of the security and privacy practices of such sub-processors to ensure the sub-processors provide a level of security and privacy appropriate to their access to data and the scope of the services they are engaged to provide. Sub-processors are re-authorized upon contract renewal or on an annual basis.

Service Delivery

OutThink engages the following sub-processors to assist in providing the OutThink service. Personal data may be transferred to help ensure performance, availability and reliability.

(1) Customers have the option to elect for their data to be stored in United Arab Emirates instead.

Elective Components

OutThink also utilizes the following sub-processors to provide certain optional services to those OutThink customers who elect to purchase those optional services:

(2) Delivers training email notifications and alerts to end-users, where a customer has elected to use OutThink’s email delivery solution, rather than their own email infrastructure.
(3) Provides authentication services & MFA for administrators in the Command Center, where the customer has elected not to use Single Sign On with their own Identity Management Solution.
(4) Delivers simulation emails to end-users, where a customer has elected to use OutThink’s Phishing Simulation module.

For Support & Customer Management

The following sub-processors are engaged by OutThink for the purposes of managing OutThink’s customer relationships and customer support management only.