OutThink uses certain sub-processors to assist in providing OutThink’s services. A sub-processor is a third-party data processor engaged by OutThink who agrees to receive personal data from OutThink intended for processing activities to be carried out (i) on behalf of OutThink customers; (ii) in accordance with customer instructions as communicated by OutThink; and (iii) in accordance with the terms of a written contract between OutThink and the sub-processor.

Prior to onboarding sub-processors, OutThink conducts an audit of the security and privacy practices of such sub-processors to ensure the sub-processors provide a level of security and privacy appropriate to their access to data and the scope of the services they are engaged to provide. Sub-processors are re-authorized upon contract renewal or on an annual basis. OutThink’s sub-processors include:

Sub-Processor NameSub-Processor ActivityLocation
Microsoft AzureCloud service provider for our services and applicationsNetherlands and Republic of Ireland1
AtlassianCustomer Support Platform Provider (Jira Service Desk)Republic of Ireland

Customers have the option to select United Arab Emirates instead.

Optional Service Sub-Processors

OutThink also utilizes the following sub-processors to provide certain optional services to those OutThink customers who elect to purchase those optional services through OutThink:

Sub-Processor NameSub-Processor ActivityLocation
Amazon Web ServicesEmail Delivery Infrastructure2,
Authentication Services for Administrators3
Republic of Ireland
SparkPost EUEmail Delivery Infrastructure4Western Europe (EU)

Delivers training email notifications and alerts to end-users, where a customer has elected to use OutThink’s email delivery solution, rather than their own email infrastructure.
3Provides authentication services & MFA for administrators in the Command Center, where the customer has elected not to use Single Sign On with their own Identity Management Solution.
4Delivers simulation emails to end-users, where a customer has elected to use OutThink’s Phishing Simulation module.