resilienceOS Sub Processors
Restrata provides the ResilienceOS platform to enterprise customers. Where ResilienceOS processes personal data about a customer’s employees, travellers and contractors, the customer is the controller of that data and Restrata acts as a processor on the customer’s documented instructions.
A sub-processor is a third party that Restrata engages to process that personal data on the customer’s behalf in order to deliver ResilienceOS. The organisations listed below are Restrata’s authorised sub-processors for ResilienceOS.
Each sub-processor is assessed before it is engaged and reviewed at least annually, and is bound by a written contract imposing data protection obligations equivalent to those Restrata owes its customers under Article 28 of the UK GDPR. Restrata remains fully liable to its customers for the performance of its sub-processors.
Where a sub-processor processes personal data outside the United Kingdom, the transfer is made under the International Data Transfer Addendum to the EU Standard Contractual Clauses issued by the Information Commissioner’s Office, or another transfer mechanism permitted under Article 46 of the UK GDPR.
This page is updated within 30 days of a new sub-processor being approved for use with ResilienceOS. Customers whose data processing agreement with Restrata provides for notification of sub-processor changes should refer to that agreement for the notice they will receive.
Hosting and infrastructure
Sub-processor
(Amazon Web Services EMEA SARL, Luxembourg)
Purpose of processing
Cloud hosting, storage, compute, database, messaging and backup infrastructure for the ResilienceOS platform.
Categories of personal data
All personal data held in ResilienceOS.
Location of processing
United Kingdom (London). Disaster-recovery copies are held in Germany (Frankfurt).
Communications delivery
resilienceOS delivers alerts, advisories, polls and reports to individuals across several channels. The providers below carry those messages.
Sub-processor
(Bird Holding B.V., Netherlands)
Purpose of processing
Delivery of email sent from ResilienceOS: mass communications, pre-trip advisories and scheduled reports.
Categories of personal data
Name, email address, employer, and message content — which may include itinerary, alert and report content.
Location of processing
European Union.
Sub-processor
Sinch (Sinch AB, Sweden)
Purpose of processing
Delivery of SMS, WhatsApp and voice (text-to-speech and interactive voice) messages sent from ResilienceOS, and capture of delivery and response status.
Categories of personal data
Name, mobile telephone number, message content, delivery and response status.
Location of processing
European Union, with onward routing by mobile network operators in the recipient’s country.
Google
(Google Ireland Limited) — Firebase Cloud Messaging
Purpose of processing
Delivery of push notifications to the Restrata mobile application. Notifications to Apple devices are passed onward to the Apple Push Notification service.
Categories of personal data
Device push token and notification content.
Location of processing
European Union and United States.
Analytics, reporting and AI
Sub-processor
Databricks (Databricks, Inc., United States)
Purpose of processing
Generation of the operational and management reports that Restrata provides to customers from ResilienceOS data.
Categories of personal data
Traveller and employee identity and contact data, itineraries, location events, incident and case data, and emergency contacts.
Location of processing
United Kingdom (London). Administrative and support access takes place from the United States.
Sub-processor
Amazon Bedrock (Amazon Web Services EMEA SARL, Luxembourg)
Purpose of processing
AI-assisted drafting and translation of communications, where a customer has enabled these features. Content is not used to train models.
Categories of personal data
Message content submitted for drafting or translation, which may include recipient names and incident detail.
Location of processing
Global.
Business operations
The systems below support how Restrata runs its business rather than forming part of the ResilienceOS platform. They have no access to the ResilienceOS production environment, and process personal data only where it appears in correspondence, documents and support requests exchanged between Restrata and its customers.
Sub-processor
Microsoft (Microsoft Ireland Operations Limited)
Purpose of processing
Microsoft 365 — business email, document storage, collaboration and Teams — used for correspondence with customers and for internal working documents.
Categories of personal data
Names and business contact details of customer personnel, and any personal data contained in correspondence and documents exchanged with Restrata.
Location of processing
European Union and United Kingdom.
Sub-processor
Atlassian (Atlassian B.V., Netherlands)
Purpose of processing
Jira and Confluence — handling of customer support requests, change management and internal documentation.
Categories of personal data
Names and business contact details of customer personnel, and any personal data included in a support request.
Location of processing
European Union.
Sub-processor
Zendesk (Zendesk International Limited, Ireland)
Purpose of processing
Customer support ticketing — receipt, triage and resolution of support requests raised by customer administrators and users, and the support correspondence arising from them.
Categories of personal data
Name, business contact details and job role of the person raising the request; the content of the request and any attachments, which may include screenshots or extracts containing personal data from ResilienceOS.
Location of processing
European Union.
Customer-connected services
Where a customer connects its own travel management company, access control system, risk intelligence feed or similar service to ResilienceOS, that provider acts for the customer under the customer’s own arrangements with it and is not a Restrata sub-processor.