Sherpa Subprocessors and In-App Tools
Last updated: 14-Feb-23
Subprocessors
One on One Sherpa, LLC (Sherpa) engages the following entities as processors of customers’ personal data:
| Entity Name | Entity location | Processing Services | Data location |
| Amazon Web Services, Inc. | US | Hosts the customer’s data in the Sherpa application(s) | Dublin, Republic of Ireland |
| Data processing agreement: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf | |||
| Snowflake, LLC | US | Data warehouse that stores analytics data which is presented to the customer’s users through Tableau | AWS as above |
| Data processing agreement: https://www.snowflake.com/legal/data-processing-addendum/ | |||
| Fivetran Inc. | US | Transmits the customer’s data between Sherpa relational database and data warehouse | EU region |
| Data processing agreement: https://www.fivetran.com/legal#dpa | |||
| Fig Learning, LLC | US | LMS provider | US |
| Data processing agreement: not available online | |||
| Twilio Inc. | US | Voice API: allows a user of the Sherpa application to click a button to make and record calls from the user’s work phone. Twilio is subprocessor of the content of the communication, but a communications service provider and therefore controller of the data used to transmit or exchange the content of the communication, including the phone numbers themselves. A list of Twilio’s subprocessors may be found here. Please see the Twilio DPA and in-app services description below for further details. | EU Region |
| Data processing agreement: https://www.twilio.com/legal/data-protection-addendum |
Changes to subprocessors
Customers wishing to receive email notification of changes to processors should contact Sherpa. Changes to processors of customers’ personal data will be listed here. Any customer objecting to the change should notify Sherpa of that objection without delay.
| Entity Name | Entity location | Processing Services | Data location | Change |
|---|---|---|---|---|
In-app services
The Sherpa application(s) include certain in-app services. These services use JavaScript code and may also serve or read cookies on the user’s device. The services help Sherpa improve and maintain the application(s) and enhance user experience throughout the application(s) as set out below:
| Entity Name | Entity location | In-app services | |
| Amplitude, Inc. | US | Allows Sherpa to set up and run analytic reports for product improvement purposes, e.g. active users in a particular region during the last 30 days. | |
| Cookies: Amplitude uses the following performance cookie which analyses use within the product, in order to improve the product and user experience within the product: | |||
| Provider | Name | Basic function | Links |
| Amplitude, Inc. | amp_[random alphanumeric string] | Device ID used to analyse user behaviour within the product; persists until user clears browser or browses in private mode | Amplitude Privacy Policy How Amplitude identifies unique users Cookies created by Amplitude Amplitude’s Stance on Security & Privacy |
| Further information: Amplitude uses pseudonymised data (user ID, device data) to produce reports. Amplitude uses the collected IP address to determine a user’s location (Sherpa uses this at country level).Data is stored in the customer’s region and transferred to the US. | |||
| Chameleon Intelligent Tech, Inc | US | Provides the customer’s users with guided tours of the Sherpa application(s) and context-specific information. | |
| Cookies: Chameleon uses one cookie, which is necessary for it to identify Sherpa as its customer: | |||
| Provider | Name | Basic function | Note |
| Chameleon | chmln-pid-* | Used for the Chameleon plugin | As at July 2022, Chameleon intends to sunset (stop using) this cookie entirely in the coming months. |
| Further information: Chameleon uses personal data (userID, name, email, role, community) to produce reports about user access to tours and information, which Sherpa uses for customer support and product improvement purposes.Data is stored in the customer’s region and transferred to the US. | |||
| Elevio Pty Ltd | Australia | Provides the customer’s users with contextual support within the Sherpa application(s). Sources helpdesk articles from Freshdesk (Freshworks’ product). | |
| Cookies: none | |||
| Further information: Generates reports about user access to helpdesk articles, which Sherpa uses for customer support and product development.Data is stored in the customer’s region and transferred to the US. | |||
| Freshworks Inc | US | Stores and delivers help desk articles to the customer’s users through ElevioHelpdesk tool within Sherpa’s application(s) | |
| Cookies: none | |||
| Further information: The helpdesk tool stores the user’s name and email, support queries and Sherpa’s responses, which Sherpa uses for customer support purposes.Data is stored in the customer’s region and transferred to the US. | |||
| Tableau Software, LLC, a Salesforce company | US | Provides the customer’s users with business analytics / reporting dashboards. | |
| Cookies: none | |||
| Further information: Data is collected from Snowflake and stored in the customer’s region.Sherpa does not send any data to Tableau Software, LLC or to Salesforce. | |||
| Localize Corporation | US | Translates terminology used in Sherpa’s application(s) (e.g. basic forms/labels, from US English to British English). | |
| Cookies: none | |||
| Further information: Sherpa provides the translation files.No customer data ever goes to the translation engine. | |||
| Twilio Inc. | US | Provides the customer’s users with functionality to make and record calls through the Sherpa application(s). | |
| Cookies: none | |||
| Further information: The in-app service is entirely optional. To switch it off, please contact Sherpa. The in-app service includes a voice recording encryption feature. Sherpa has enabled this. To disable it, please contact Sherpa. For further information about Twilio’s protection of customer data, including when and how Twilio responds to requests from law enforcement or government agencies, please see this help page. |
Contact
To contact Sherpa about these processors or in-app services, please email privacy@sherpa.com.
