Sub-Processors
OutThink uses certain sub-processors to assist in providing OutThink’s services. A sub-processor is a third-party data processor engaged by OutThink who agrees to receive personal data from OutThink intended for processing activities to be carried out (i) on behalf of OutThink customers; (ii) in accordance with customer instructions as communicated by OutThink; and (iii) in accordance with the terms of a written contract between OutThink and the sub-processor.
Prior to onboarding sub-processors, OutThink conducts an audit of the security and privacy practices of such sub-processors to ensure the sub-processors provide a level of security and privacy appropriate to their access to data and the scope of the services they are engaged to provide. Sub-processors are re-authorized upon contract renewal or on an annual basis. OutThink’s sub-processors include:
| Sub-Processor Name | Sub-Processor Activity | Location |
| Microsoft Azure | Cloud service provider for our services and applications | Netherlands and Republic of Ireland1 |
| Atlassian | Customer Support Platform Provider (Jira Service Desk) | Republic of Ireland |
1 Customers have the option to select United Arab Emirates or United States (**coming soon) instead.
Optional Service Sub-Processors
OutThink also utilizes the following sub-processors to provide certain optional services to those OutThink customers who elect to purchase those optional services through OutThink:
| Sub-Processor Name | Sub-Processor Activity | Location |
| Amazon Web Services | Email Delivery Infrastructure2, Authentication Services for Administrators3 | Republic of Ireland |
| SparkPost EU | Email Delivery Infrastructure4 | Western Europe (EU) |
2 Delivers training email notifications and alerts to end-users, where a customer has elected to use OutThink’s email delivery solution, rather than their own email infrastructure.
3Provides authentication services & MFA for administrators in the Command Center, where the customer has elected not to use Single Sign On with their own Identity Management Solution.
4Delivers simulation emails to end-users, where a customer has elected to use OutThink’s Attack Simulation module.