List of sub-processors [Extended] 20230516 I Synthesia

List of sub-processors [Extended] 20230516

Version before 25 January 2023 available here

Version before 16 May 2023 available here

Appendix 2 – List of approved sub-processors

Last updated 16 May 2023

  1. Name: Synthesia Inc.
    Address: 874 Walker Road, Suite C, City of Dover, DE 19904, United States
    Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
    Description of processing: Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

  2. Name: Synthesia B.V.
    Address: Grote Bickersstraat 74, 1013 KS Amsterdam, Netherlands
    Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
    Description of processing: Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

  3. Name: Synthesia GmbH
    Address: Pacellistraße 8, 80333 München, Germany
    Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
    Description of processing: Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

  4. Name: Synthesia ApS
    Address: Vesterbrogade 149, bygning 4, 1.tv, 1620 København V. Denmark
    Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
    Description of processing: Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

  5. Name: Amazon Web Services EMEA SARL
    Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg
    Contact person’s name, position and contact details: Laura Wainwright, AWS account manager lauwai@amazon.com
    Description of processing: Web hosting, data storage and compute for video processing services. Identity data is transmitted and stored for the purpose of user account setup and authorisation. Audio/Video data of a person is stored and transmitted for the purpose of video creation.

  6. Name: MongoDB Limited
    Address: Building Two, Number One Ballsbridge, Dublin 4, Ballsbridge, Dublin, Ireland
    Contact person’s name, position and contact details: MongoDB’s DPO at privacy@mongodb.com
    Description of processing: Structuring and storing production data

  7. Name: Google Cloud EMEA Limited
    Address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
    Contact person’s name, position and contact details: Emil Ochotta, Data Protection Officer, https://support.google.com/cloud/contact/dpo
    Description of processing: email service provider used for communicating data to Processor

  8. Name: Stripe Payments Europe, Ltd
    Address: One Spencer Dock, North Wall Quay, Dublin 1
    Contact person’s name, position and contact details: Adi Gilad, Data Protection Officer, dpo@stripe.com
    Description of processing: Payment provider only if the payment is made via credit card

  9. Name: The Rocket Science Group LLC d/b/a Mailchimp
    Address: 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA
    Contact person’s name, position and contact details: Meghan Farmer, Data Protection Officer, dpo@mailchimp.com
    Description of processing: Automated user notifications. Identity data is transmitted for the purpose of providing email notifications to end users.

  10. Name: Kaleido AI GmbH
    Address: Ungargasse 37/BT1/3.3, 1030 Wien, Austria
    Contact person’s name, position and contact details: Michal Dzujka, Customer Success Manager, michal@kaleido.ai
    Description of processing: Video processing to prepare a custom avatar. Video data of a person is transmitted and stored for a time-limited period for the purpose of pre-processing video to create a custom avatar for the service.

  11. Name: Salesforce UK Limited
    Address: Floor 26 Salesforce Tower, 110 Bishopsgate, London EC2N 4AY, United Kingdom
    Contact person’s name, position and contact details: Lindsey Finch, DPO, privacy@salesforce.com
    Description of processing: Customer relationship management. Account emails are stored with the company information.

  12. Name: Intercom R&D Unlimited Company
    Address: 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland
    Contact person’s name, position and contact details: Intercom Privacy Team, legal@intercom.io
    Description of processing: Support ticketing system and widget

  13. Name: Surfboard Technology Ltd
    Address: 320 City Road, London, EC1V 2NZ, United Kingdom
    Contact person’s name, position and contact details: Elva Tucker, Customer Success Manager, elva@teamsurfboard.com
    Description of processing: Processing the support tickets raised via Intercom for allocation, scheduling, and prioritization with the support personnel.

  14. Name: Slack Technologies, Inc.
    Address: 4th Floor, One Park Place, Hatch Street Upper, Dublin 2, Ireland
    Contact person’s name, position and contact details: Lindsey Finch, Executive Vice President, Global Privacy & Product Legal, dpo@slack.com
    Description of processing: Internal company communication and content moderation management for the service. Identity data is transmitted and stored for the purpose of content review on the service.

  15. Name: IBM United Kingdom Limited
    Address: PO Box 41 North Harbour, Portsmouth, PO6 3AU, United Kingdom
    Contact person’s name, position and contact details: chiefprivacyoffice@ca.ibm.com
    Description of processing: Text-to-speech conversion

  16. Name: Deep Zen Ltd.
    Address: Flat 1, 66 Upper, Richmond Road, London SW15 2RP, United Kingdom
    Contact person’s name, position and contact details: Taylan Kamis CEO, taylank@deepzen.io
    Description of processing: Text-to-speech conversion

  17. Name: WellSaid Labs Inc.
    Address: 2157 N Northlake Way, Ste 110, Seattle, WA, 98103-9184, United States
    Contact person’s name, position and contact details: Marta Mueller, Customer Success Manager, marta@wellsaidlabs.com
    Description of processing: Text-to-speech conversion

  18. Name: Microsoft Ireland Operations Limited
    Address: South County Business Park Leopardstown, Dublin 18, D18 P521, Ireland
    Contact person’s name, position and contact details: Contact web form available here https://www.microsoft.com/en-us/concern/privacy or via physical address
    Description of processing: Content moderation, text-to-speech, speech-to-text conversion

  19. Name: Mux Inc.
    Address: 1182 Market St. Suite 425 San Francisco, CA 94102, United States
    Contact person’s name, position and contact details: Mrs. Becca Axvig – becca@mux.com, Head of People
    Description of processing: Video content delivery network

  20. Name: Functional Software, Inc. d/b/a Sentry
    Address: 45 Fremont Street, 8th Floor, San Francisco, CA 94105, United States
    Contact person’s name, position and contact details: Virginia Badenhope, General Counsel, legal@sentry.io
    Description of processing: Error logging, the error log may contain a part of the user provided script that caused the error.

  21. Name: UAB ConvertAPI
    Address: Lauksargio g. 111, Vilnius LT-10105, Lithuania
    Contact person’s name, position and contact details: data-protection@convertapi.com
    Description of processing: Conversion of PowerPoint presentations uploaded by the customers into slides in STUDIO. No persistent storage is utilised.

  22. Name: Deepgram, Inc.
    Address: 548 Market St, Suite 25104, San Francisco, CA 94104-5401, United States
    Contact person’s name, position and contact details: Chris Dyer, VP of Sales, security@deepgram.com
    Description of processing: Validating that the speaker reading the consent script for the cloned voice services is the same speaker reading the script that will be used to clone their voice. Speech-to-text conversion.

  23. Name: OpenAI OpCo, LLC
    Address: 3180 18th St., San Francisco, CA 94110, United States
    Contact person’s name, position and contact details: Jason Kwon, General Counsel, legal@openai.com
    Description of processing: Provides responses to the user’s queries when prompted to create a video script using AI from within the product. Content moderation. Sub-processor will not use the data for any internal purpose including training of the LLM models (https://openai.com/policies/api-data-usage-policies)