Data processing
Subprocessor List
This list describes the principal service providers currently used for the SmartShift Central production architecture. Specific client deployments and contractual arrangements may vary.
| Provider | Purpose | Typical data | Notes |
|---|---|---|---|
| OpenAI | Configured AI model inference | Governed provider request content and service metadata | Used only for enabled AI processing; SSC applies configured governance/privacy controls before provider submission. |
| Salesforce / Heroku | Application hosting, managed PostgreSQL, managed key-value/cache services and operational runtime | Account/service data, application records, logs and metadata | Production application infrastructure. |
| Amazon Web Services (AWS) | Private object storage | Supported uploaded files and related stored objects | S3-based private storage; region/configuration may be deployment-specific. |
| Fasthosts | Public website hosting, DNS/email services and transactional SMTP where configured | Website request metadata and service email content/metadata | Used for SmartShift corporate website/email functions; client deployments may vary. |
Changes
We may add or replace subprocessors where operationally necessary and will handle customer notification/objection rights as required by the applicable Data Processing Addendum or customer agreement.